snag.page

Every check ยท Email

MTA-STS

email/mta-sts

What it checks

An MTA-STS record, where the domain takes email.

Why it matters

It makes servers sending you email insist on encryption.

How to fix it

  1. Publish a policy at https://mta-sts.example.com/.well-known/mta-sts.txt, with your own domain.
  2. Add a TXT record at _mta-sts and your domain, changing its id whenever the policy changes.
TXT record at _mta-sts.example.com
v=STSv1; id=1

Check a site for this and everything else: snag.page. More on email: SPF SPF lookups DMARC TLS reporting Mail servers DKIM