Supporting senders should refuse delivery when the advertised TLS requirements cannot be met.
Email transport security
MTA-STS & TLS-RPT checker
Inspect SMTP transport-security policy and TLS reporting configuration published for a mail domain.
Quick guide
What MTA-STS and TLS-RPT protect
MTA-STS lets a domain publish a policy telling supporting senders to require trusted TLS when delivering mail to its MX hosts. The DNS TXT record points to a versioned HTTPS policy under mta-sts.example.com.
TLS-RPT is complementary reporting. A domain can publish where aggregate reports about SMTP TLS delivery problems should be sent.
Senders may report policy failures without enforcing rejection.
Reporting destination, usually a mailto: address or supported HTTPS report endpoint.
IPGetter checks the MTA-STS and TLS-RPT DNS records, fetches the published MTA-STS policy where available, and summarises its mode and allowed MX patterns.
- Auditing inbound SMTP TLS policy
- Troubleshooting MTA-STS deployment
- Checking TLS failure-reporting configuration
Terminal shortcut
Prefer the command line?
Inspect MTA-STS and TLS-RPT policy.
> mtasts example.com
Run in Terminal ->