MTA-STS and TLS-RPT
What it can report
- ! low no _mta-sts record on a domain that receives mail (low) How to fix it
- · info the domain accepts no mail (info) How to fix it
- · info the TXT record is malformed or duplicated How to fix it
- · info the policy file could not be fetched (no such host, no address, refused, tls failure, http error; a scanner-side timeout or resolver failure is "could not check") How to fix it
- · info the policy host's certificate does not verify How to fix it
- · info the policy file is malformed or behind a redirect How to fix it
- ! low mode testing: failures are only reported (low) How to fix it
- ! low mode none: the policy is switched off (low) How to fix it
- · info MX hosts not covered by the policy's mx patterns How to fix it
- ! low max_age under one day (low) How to fix it
- ! low no _smtp._tls record (low next to MTA-STS, else info) How to fix it
- · info the TLS-RPT record is malformed or duplicated How to fix it
How it counts
The score is computed by fixed rules from the checks that ran, and this check has a weight of 2 within Email. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.
Related checks
Scan your own domain and see this check run.