• TXT Record: Published at _smtp._tls.domain containing the TLS-RPT version and reporting URIs.
• Report URIs: Email addresses or HTTPS endpoints where TLS reports should be sent (e.g., mailto:reports@domain.com or https://reports.domain.com/submit).
• Version: Currently "TLSRPTv1" is the only defined version in RFC 8460.
• Report Format: Reports are sent as JSON documents containing details about TLS connection attempts, successes, and failures.

Why is TLS-RPT Important?

TLS-RPT provides visibility into email delivery security issues, helps identify misconfigured mail servers, detects potential attacks or interception attempts, and validates MTA-STS policy effectiveness. It's essential for monitoring the health of your email security infrastructure.

Interpreting the Results

If TLS-RPT is configured, you'll see a valid record with one or more reporting URIs. If not configured, the tool will indicate no record was found. To configure TLS-RPT:

1. Create a TXT record at _smtp._tls.domain
2. Specify version and reporting URIs in the record
3. Set up email or HTTPS endpoints to receive reports
4. Monitor incoming reports for security issues