snag.page

github.com · Email

No MTA-STS

Worth doing Checked 15 Nov 2026, 19:33 UTC

Servers sending you email may deliver it unencrypted if someone interferes with the connection.

  1. Publish a policy at https://mta-sts.github.com/.well-known/mta-sts.txt.
  2. Then add the record below, changing its id whenever the policy changes.
TXT record at _mta-sts.github.com
v=STSv1; id=1

What it checks

An MTA-STS record, where the domain takes email.

Why it matters

It makes servers sending you email insist on encryption.

Everything to fix on github.com · About this check