TLS-RPT Checker
Validate the SMTP TLS Reporting record that tells other mail servers where to send reports about encryption failures.
Free, no account needed.
What this check looks at
- Whether a TXT record is published at _smtp._tls.yourdomain and whether it starts with v=TLSRPTv1.
- The rua= destinations: mailto: addresses or https: endpoints.
Why it matters
TLS-RPT is the reporting side of MTA-STS and DANE. Senders like Google and Microsoft send daily reports listing any failed attempts to deliver to you securely, such as expired certificates or hostname mismatches, so you can fix problems before they cost you mail.
Frequently asked questions
Do I need TLS-RPT without MTA-STS?
It is still useful: reports show whether senders can negotiate TLS with your servers. It matters most when you move MTA-STS to enforce.
Related tools
- MTA-STS CheckerCheck that MTA-STS is set up correctly, so other mail servers only deliver to you over verified, encrypted connections.
- SMTP Server TestConnect to a mail server on port 25 and check its greeting, STARTTLS support and TLS certificate, just as a sending server would.
- Email Domain Health CheckRun every email and DNS check for a domain at once and get a single report with everything that needs attention.