Back to Toolkit

TLS-RPT Verification

Lookup and verify SMTP TLS Reporting (TLS-RPT) records for your domain to ensure you receive TLS negotiation failure reports.

1 Enter Domain
2 Lookup
3 Assess Record
4 Generate TLS-RPT
SorbSecurity Product
Sender Discovery — Visualize TLS failure reports alongside DMARC data. Monitor email transport security from one dashboard.
Get Started Free
Try sample
DNS TXT query: _smtp._tls.example.com
How It Works
1

Enter Domain

Provide the domain to check

2

DNS Query

We look up TXT records at _smtp._tls.domain

3

Assess Record

Evaluate record against recommended standards

4

Generate TLS-RPT

Create an optimized record if issues are found

What is TLS-RPT?

TLS-RPT (RFC 8460) allows domain owners to receive reports about TLS negotiation failures when remote servers attempt to deliver email to their domain.

A TLS-RPT record is published as a DNS TXT record at _smtp._tls.yourdomain.com and specifies where sending mail servers should deliver TLS failure reports.

TLS-RPT Tags
  • v= Version: must be TLSRPTv1
  • rua= Report URI: mailto: or https: destination for TLS reports