Lookup and verify MTA-STS (Mail Transfer Agent Strict Transport Security) DNS records and policy files for your domain.
Enter Domain
Provide the domain to check
DNS + Policy Lookup
We query _mta-sts.domain and fetch the policy file
Assess Configuration
Evaluate DNS record and policy against best practices
Generate MTA-STS
Create an optimized configuration if issues are found
MTA-STS (RFC 8461) allows a domain to declare that it supports TLS for inbound SMTP connections and that sending servers should refuse to deliver mail over an unencrypted channel.
It requires two components: a DNS TXT record at _mta-sts.yourdomain.com and a policy file served over HTTPS at https://mta-sts.yourdomain.com/.well-known/mta-sts.txt.
enforce
Strongest — reject mail if TLS cannot be established
testing
Moderate — report failures via TLS-RPT but still deliver
none
Disabled — signals MTA-STS is not active