Open Terminal

TLS Reporting (TLS-RPT)

Available

Look up a domain’s TLS-RPT record at _smtp._tls and validate its reporting addresses.

TLS Reporting (TLS-RPT)

Domain name

Open in terminal
Try:

How it works

The server queries TXT at _smtp._tls.<domain> and validates the v=TLSRPTv1 version and rua destinations (mailto: or https:).

Safeguards & responsible use

  • Only public domain names are accepted; internal names (.local, .internal, …) are rejected.
  • Queries go to public resolvers, never to internal DNS.
  • Per-client rate limiting and query timeouts.

Frequently asked questions

Why use TLS-RPT?

Sending servers report TLS negotiation failures to you, which is essential before enforcing MTA-STS or DANE.

What does a record look like?

v=TLSRPTv1; rua=mailto:[email protected]