TLS-RPT Checker & Generator

Check your existing TLS-RPT record or generate a new one to receive TLS failure reports.

Use mailto: for email or https: for an HTTPS endpoint.

No monitoring address? Sender Audit provides one for free and analyses your TLS-RPT reports automatically.

Monitoring address configured.

Alternative HTTPS URL to receive reports in addition to email.

Understanding TLS-RPT

TLS-RPT (RFC 8460) lets domains receive reports when sending servers encounter TLS negotiation problems during delivery.

The record is a DNS TXT at _smtp._tls.yourdomain.com. It specifies where to send reports (rua) in JSON format.

TLS-RPT complements MTA-STS and DANE. Without reports, you won't know if emails fail due to TLS issues.

Frequently Asked Questions

Secure your emails with a full audit

TLS-RPT is one piece of email security. Sender Audit checks TLS, DANE, MTA-STS and all authentication protocols.

Start a free audit

Other free tools