X-RAY // MAIL // TLS-RPT

TLS-RPT
CHECK.

See whether the domain publishes _smtp._tls with where to send reports of TLS failures in email delivery (RFC 8460), useful together with MTA-STS.

Runs only this check. For all 33 checks at once, use the full Domain X-Ray. Public lookups only; nothing is stored on the server.

TLS-RPT

WAITING

Enter a domain above to run this check.

01 // WHAT THE CHECK VERIFIES

Checks the _smtp._tls record, which says where senders send reports of TLS failures when delivering email.

02 // WHY IT MATTERS

Without reports, certificate or MTA-STS problems on your mail server go unnoticed.

03 // HOW TO READ THE RESULT

WARNING: There is more than one TLS-RPT record: senders may ignore all of them.
INFO: Reports are set up, with the destination, or TLS-RPT is missing (optional).

ERROR and TIMEOUT mean the query did not finish (the source was down or slow), not a problem with the domain: run the check again.

04 // HOW TO FIX

A single TXT at _smtp._tls, pointing to a mailbox someone reads:

_smtp._tls.example.com. TXT "v=TLSRPTv1; rua=mailto:tlsrpt@example.com"

Would rather have someone else do it? Bit Happens can fix this →

05 // CONTINUE