Self-hosted email is in steep decline, Microsoft and Google are taking over

Self-hosted email servers on the top 1M domains fell from 44.6% in 2016 to 22.4% in 2026, with the self-hosting share dropping another ~0.5% over just the last 30 days. Concentration is rising as Google Workspace (21.8% of detectable MX records) and Microsoft 365 (16.8%) together account for 38.6% of email receiving, raising systemic outage/deliverability risk. The article also flags that over half of DMARC DNS records are not properly enforced despite 2024 bulk-sender requirements from Google and Yahoo.

Analysis

This is less a direct earnings story than a hidden distribution moat for GOOGL and MSFT. As more domains abandon self-hosted mail, the incumbents’ filtering standards become the de facto gatekeepers for business communication, which raises switching costs and quietly pulls more SME spend into Workspace/M365 and adjacent security/compliance add-ons. The second-order winner set is broader than the article implies: any vendor that helps enterprises manage reputation, authentication, and outbound deliverability should see higher urgency, even if budget growth is deferred.

Near term, the market risk is mostly narrative, not cash flow. A concentration headline can pressure the stocks for a day or two on antitrust/operational-failure optics, but the actual P&L exposure is small unless regulators move from concern to interoperability rules or inbox-filtering constraints over the next 6-18 months. The more credible catalyst for a real rerating is an outage or policy change that proves the single-point-of-failure argument in a visible way; absent that, the investment case remains intact.

The consensus is probably overweight the downside from centralization and underweight the moat effect from deliverability control. The stickiness here is behavioral: marketers and IT teams optimize for messages landing, not ideological decentralization, so the biggest beneficiaries are the providers with the best spam/abuse defenses. That makes this more of a slow-burn share gain story for the big two than a structurally bearish thesis on them.

Key Decisions for Investors

• Use any 1-2 day selloff in GOOGL/MSFT to add via 3-6 month call spreads; the thesis is that the article creates headline risk without a meaningful revenue hit, while inbox control strengthens their moat. Falsify if DOJ/FTC opens a concrete case on mail filtering/interoperability.
• Set a regulatory alert rather than a directional short: if US/EU policy starts treating inbox filtering or DMARC enforcement as a platform gatekeeping issue, re-underwrite GOOGL/MSFT and expect a 3-5% multiple compression over 1-2 quarters.
• If evidence emerges that DMARC enforcement is actually tightening, rotate into email-security beneficiaries such as PANW or CHKP on a 3-12 month horizon; that’s the cleaner trade than fighting the platform incumbents directly.