Skip to content

Lookup Tools Watches Pricing Learn API

Menu

Lookup Tools Pricing Learn Sign up free

Sign in Sign up free

Home › Tools › Email

MTA-STS and TLS-RPT builder

Three things to publish: a TXT record, a small policy file over HTTPS, and a reporting address. Start in testing mode.

Policy Your domain MX hosts (one per line or comma separated; wildcards allowed)

mode: testing Senders report failures but still deliver. Start here. mode: enforce Senders refuse to deliver without valid TLS to a listed MX. mode: none Withdraw a policy senders have cached.

Cache lifetime (max_age, seconds)604800 = one week. Keep it short while testing. I have run testing mode and read the TLS-RPT reports

Reporting TLS-RPT address (rua)

The three records appear here. MTA-STS needs a web server answering for mta-sts.yourdomain with a valid certificate; most static hosts and CDNs can do that.

Domain intelligence, made clear. Registry data shown exactly as the registries publish it.

Tools

WHOIS and RDAP
DNS records
Email setup check
Blocklist scan
TLS certificate check
Header decoder

Company

Learn
Fix guides
Glossary
Pricing
What is my IP
About
Methodology
Changelog
Status
API
Contact

Legal

Terms of service
Privacy and cookies
Acceptable use
Data sources
Removal requests

© 2026 whois.me.uk. A The Email Shop Ltd service.

Register a domain at The Email Shop.

The Email Shop Ltd is a company registered in England and Wales, company number 16879797. Registered office: 8 Brookdale Drive, Littleover, Derby, DE23 3YY. Trading address: Suite 16-17, Parker House, Mansfield Road, Derby, DE21 4SZ.