All fix guides
How to add SMTP TLS reporting (TLS-RPT)
Get notified when mail delivery to your domain fails to encrypt.
What it is
TLS-RPT is a DNS TXT record that asks sending servers to email you reports about TLS failures when delivering to your domain.
Why it matters
Without TLS-RPT you have no visibility into downgrade attacks or misconfigurations breaking encrypted mail delivery.
How to fix it
- 1Publish a TXT record at `_smtp._tls.yourdomain.com`: `v=TLSRPTv1; rua=mailto:tls-reports@yourdomain.com`.
- 2Pair it with MTA-STS so you both enforce and monitor TLS.
- 3Review the reports periodically for delivery failures.
- 4Re-scan to confirm TLS-RPT is published.
Not sure if your site is affected?
Run a free scan — or let us fix it all for you.