TLS-RPT Check
Check a domain's SMTP TLS reporting (TLS-RPT) record.
No results yet
Enter a domain above and press Run to start the check.
About the TLS-RPT Check
TLS-RPT Check looks up a domain's SMTP TLS Reporting record, a TXT entry at _smtp._tls.yourdomain beginning with v=TLSRPTv1. The record specifies a destination, via the rua tag, where receiving servers send daily reports about the success and failure of TLS connections for your mail. It complements MTA-STS and DANE by giving you visibility into delivery encryption problems.
How to use
- Enter the domain whose TLS-RPT record you want to review.
- Run the check to read the TXT record at _smtp._tls.yourdomain.
- Confirm the rua destination for reports is set to a valid address.
Frequently asked questions
- What does TLS-RPT report on?
- It collects aggregate reports about whether incoming mail to your domain was delivered over successful TLS connections, surfacing encryption failures.
- Where is the TLS-RPT record located?
- It is a TXT record at _smtp._tls.yourdomain that starts with v=TLSRPTv1 and includes an rua reporting destination.
- How does TLS-RPT relate to MTA-STS?
- MTA-STS enforces TLS for inbound mail, while TLS-RPT provides the feedback channel that reports how well that enforcement is working.