What this tool does
Looks up a domain’s TLS-RPT policy record. TLS-RPT publishes, in DNS, where to send reports when TLS fails during mail delivery.
How to use it
- Enter the domain.
- Run it to see the lookup result for the _smtp._tls record.
- Read the rua value for the report destination.
Worked example
Entering example.com looks up the TXT record at _smtp._tls.example.com. Nothing found means TLS reporting is not configured.
Frequently asked questions
- How does this differ from MTA-STS?
- MTA-STS enforces TLS; TLS-RPT collects reports on the outcome. They are usually deployed together — gather reports first, review failures, then raise enforcement.
- How often do reports arrive?
- It depends on the sender’s implementation, but daily aggregates are typical. Low-traffic domains may receive none.
What this tool does not cover
It checks only that the record exists and what it says. It does not confirm that reports arrive or measure TLS success rates.