TLS-RPT not configured — no visibility into failed TLS delivery
TLS-RPT (RFC 8460) asks sending servers to report failed or downgraded TLS connections to your mail servers. It is the feedback loop that makes MTA-STS safe to enforce.
It is a single TXT record and it changes nothing about mail flow.
How to fix it
- 1Publish a TXT record at _smtp._tls.yourdomain.com with: v=TLSRPTv1; rua=mailto:tlsrpt@yourdomain.com
- 2Use a mailbox that is actually monitored.
- 3Enable it before moving MTA-STS from testing to enforce.
Check whether your domain has this problem
Free, no signup, about two seconds. You get the exact record to paste.
Related guides
- DKIM record with empty p= — a revoked key still in use
- SPF include points at a domain with no SPF record — a silent PermError
- DMARC record syntax errors that make receivers skip your policy
- DMARC external destination not authorized — why you receive no reports
- Two DMARC records at _dmarc — why your policy is being ignored