TLS-RPT checker
Checks the _smtp._tls TXT record - reporting destinations for TLS connection failures.
1 · Input
What TLS-RPT reports on
RFC 8460 defines a way for sending mail servers to report back when a TLS connection to a domain's mail servers failed or could not be negotiated as expected - the visibility half of the MTA-STS/DANE picture. Without it, a domain has no way to know its TLS enforcement is causing legitimate mail to fail somewhere, since a broken MTA-STS policy fails closed and silently on the sending side.
What is checked
- The
_smtp._tls.domainTXT record and itsv=TLSRPTv1version tag - The
rua=reporting destinations, and whether each is a validmailto:orhttps:URI - Duplicate records - RFC 8460 treats more than one as invalid
Related tools
See MTA-STS checker - TLS-RPT reports on the connections MTA-STS is meant to protect, so the two are normally deployed together.
Rate this tool
Was this tool useful? Your feedback helps us improve it.
No ratings yet — be the first to rate this tool.