Free TLS-RPT checker · Instant · No signup

TLS-RPT Checker

Validate your TLS-RPT record. Domain Doctor checks your _smtp._tls TXT record so you receive reports when TLS delivery to your domain fails.

19 checks per scan Results in seconds Free, no signup

The tool

What the TLS-RPT Checker checks

TLS-RPT (SMTP TLS Reporting) is the feedback channel for MTA-STS and DANE. When another server fails to deliver mail to you over TLS, TLS-RPT tells them where to send a report, so you find out about downgrade attacks and misconfigurations instead of silently losing mail.

Domain Doctor validates your _smtp._tls TXT record, confirms the v=TLSRPTv1 version and a valid rua reporting destination (a mailto: or https: endpoint).

How it works

Check your domain in three steps

1Enter your domainType any domain into the box above and start the free scan. No signup, no software.

2We inspect it liveDomain Doctor reads your TLS-RPT reporting record, in real time from our servers.

3Get a clear verdictYou get a plain-language result, the exact records we found, and a concrete fix if anything is wrong.

What to watch for

Common TLS-RPT Checker problems

No TLS-RPT record, so you get no delivery failure reports
Invalid rua target (malformed mailto or https)
Missing v=TLSRPTv1 version tag
Record present but MTA-STS not deployed alongside it

VASTROX Email Security

See TLS delivery failures before they cost you

We add TLS-RPT alongside MTA-STS so you find out about downgrade attacks instead of quietly losing mail.

Valid TLS-RPT record published
Deployed alongside MTA-STS
Reports monitored for you

Enable TLS-RPT Talk to VASTROX about email

Hosting, VPS, business email and game servers. Free migration. Real support.

Questions

Frequently asked

Is TLS-RPT required?

It is optional but strongly recommended alongside MTA-STS. Without it you have no visibility into TLS delivery failures.

Where do TLS-RPT reports go?

To the address in your rua tag, either a mailbox (mailto:) or an HTTPS endpoint that accepts JSON reports.