snag.page

Every check ยท Email

TLS reporting

email/tls-rpt

What it checks

A TLS-RPT record at _smtp._tls, for a domain that takes email.

Why it matters

With it, servers that can't deliver your email securely send you a daily report, so a broken certificate or MTA-STS policy is noticed.

How to fix it

  1. Add the TXT record, with an address that can take a daily report.
TXT record at _smtp._tls.example.com
v=TLSRPTv1; rua=mailto:tls-reports@example.com

Check a site for this and everything else: snag.page. More on email: SPF SPF lookups DMARC MTA-STS Mail servers DKIM