Free TLS-RPT Record Checker
Ensure your domain is configured to receive TLS reports (SMTP TLS Reporting) to monitor email connection security.
What Is TLS-RPT?
SMTP TLS Reporting (TLS-RPT), defined in RFC 8460, is the reporting companion to MTA-STS and DANE. It instructs sending mail servers to send you reports about TLS negotiation successes and failures when delivering email to your domain. Without TLS-RPT, you have no visibility into whether encrypted delivery is working as intended — TLS failures are silent by default. Reports are delivered as JSON files containing details about certificate validation failures, MTA-STS policy fetch errors, DANE validation issues, and TLS handshake problems.
What Our Checker Validates
Our tool queries DNS for the TXT record at smtp.tls.yourdomain.com and validates the syntax. It checks that the v=TLSRPTv1 version tag is present, that at least one reporting URI (rua) is specified, and that each URI is correctly formatted — either a mailto: address for email delivery or an https: endpoint for JSON POST submission. The tool also flags missing records, extra whitespace, invalid characters, and incorrect DNS record placement.
Why TLS-RPT Matters for Your Security Posture
TLS-RPT provides the operational intelligence needed to maintain transport encryption. Without it, you cannot know if sending servers are failing to negotiate TLS with your MX hosts, which could mean emails are being delivered in plain text or failing to deliver entirely. This is especially important when deploying MTA-STS in enforce mode — TLS-RPT reports will immediately alert you to any legitimate senders that cannot negotiate TLS, allowing you to address the issue before it impacts email delivery.