With less than two months before the Homeland Security Department’s Oct. 16 deadline, the number of agency domains still not using the DMARC protocol is more than 200.