Fix the TLS-RPT record on Cloudflare
Why it matters
Senders ignore a TLS-RPT record that is duplicated or has no usable report address, so you get no failure reports. The record needs one v=TLSRPTv1 and an rua URI.
The fix
- In the Cloudflare dashboard open DNS > Records, search for _smtp._tls, delete duplicates, and edit the remaining record so Content is v=TLSRPTv1; rua=mailto:your-mailbox. Save.
text
Type: TXT Name: _smtp._tls.example.com Content: v=TLSRPTv1; rua=mailto:[email protected]
The examples use example.com. Replace it with your own domain.
Related
- Reported by the MTA-STS and TLS-RPT check
- Publish an MTA-STS policy, starting in testing mode
- Nothing to do for MTA-STS on a domain that accepts no mail
- Fix the MTA-STS TXT record
- Make the MTA-STS policy file reachable
- Fix the certificate on the MTA-STS policy host
- Fix the MTA-STS policy file
- Switch MTA-STS from testing to enforce
- Turn MTA-STS back on
- Make the MTA-STS policy cover every MX host
- Raise the MTA-STS max_age
- Publish a TLS-RPT record
Scan your domain to see whether this applies to you.