TLS-RPT Check
TLS-RPT is a DNS record at _smtp._tls that asks sending servers to report failed TLS connections to your mail servers. This check reads the record and its reporting addresses.
When to use this: You are rolling out MTA-STS or DANE and want daily reports on delivery failures. Command prefix tlsrpt:
About the TLS-RPT Check
Check the _smtp._tls TXT record that asks senders to report TLS delivery failures to your address.
FAQ
- Do I need TLS-RPT?
- It is optional but it is how you learn that MTA-STS or certificate problems are blocking mail.
- What do the reports contain?
- Daily JSON summaries of successful and failed TLS sessions to your MX hosts, by sending organization.