SMTP TLS Reporting (TLS-RPT) Record Generator

Generate a valid _smtp._tls TXT record (v=TLSRPTv1) with mailto and optional https report URIs so receiving MTAs can send you reports when STARTTLS to your MX fails. Free, client-side only.



How to use it
  1. TLS-RPT (RFC 8460) tells sending MTAs where to report failed TLS negotiations when delivering mail to your MX over STARTTLS.
  2. Enter one or more report mailbox addresses and optionally an HTTPS endpoint that accepts TLS-RPT JSON reports.
  3. Publish the TXT value on host _smtp._tls.<domain> (for example _smtp._tls.example.com).
  4. TLS-RPT pairs with MTA-STS: MTA-STS publishes the required TLS policy; TLS-RPT tells you when senders cannot meet it.


Audit hundreds of domains at once
Need SPF, DMARC and MX checks across a whole client list? Run the Bulk SPF / DMARC / MX Auditor on Apify ($2 per 1,000 domains).
FAQ
What is TLS-RPT?
SMTP TLS Reporting (RFC 8460) lets receiving domains publish a DNS record that tells sending mail servers where to send reports when a TLS session to the MX cannot be established or validated. Reports are JSON summaries, not full message content.
How is TLS-RPT different from DMARC rua?
DMARC rua covers SPF/DKIM authentication and alignment failures for the From domain. TLS-RPT covers transport-layer TLS failures when delivering to your MX (certificate problems, STARTTLS not offered, policy mismatches). They solve different layers and both are useful.
Where do I publish the TLS-RPT record?
As a TXT record on host _smtp._tls.<your-domain>. Example host: _smtp._tls.example.com. Only one TLSRPTv1 record should exist for the domain.
How does TLS-RPT relate to MTA-STS?
MTA-STS publishes a policy that requires TLS (and lists allowed MX hosts). TLS-RPT tells you when senders fail that policy or otherwise cannot complete STARTTLS. Deploy them together: generate an MTA-STS policy, then add TLS-RPT so you can see failures.
What does a sample TLS-RPT record look like?
v=TLSRPTv1; rua=mailto:tlsrpt@example.com or with multiple destinations: v=TLSRPTv1; rua=mailto:tlsrpt@example.com,https://reporting.example.com/v1/tlsrpt
Want the full kit?
Runbooks, checklists and helpdesk templates: IT Admin Packs on Gumroad.