TLS-RPT lookup

Confirm your SMTP TLS reporting record is set correctly.

Create a free SJ Monitor account to watch your domains' uptime, SSL, and blacklist status around the clock. Start free →

A TLS-RPT lookup reads the _smtp._tls DNS TXT record that tells other mail servers where to send aggregate reports about TLS connection successes and failures. The tool confirms the record exists, is correctly formatted, and names a valid reporting destination such as a mailbox or HTTPS endpoint. With it in place, you gain visibility into delivery problems that MTA-STS or DANE would otherwise hide from you. Because that record is easy to overlook once set, SJ Monitor can keep an eye on it and tell you if it disappears or changes.

Frequently asked questions

What does TLS-RPT actually do?

It does not enforce anything; it simply requests that other servers send you reports about whether TLS-secured delivery to your domain succeeded or failed. Those reports help you spot misconfigurations.

Does TLS-RPT require MTA-STS?

They work well together but are independent records. TLS-RPT is most useful alongside MTA-STS or DANE because it surfaces the failures those policies create.

How do I know if my record gets removed?

SJ Monitor can monitor the TLS-RPT record continuously and alert you if it is deleted or edited so your reporting never silently stops.

Where is the TLS-RPT record published?

As a TXT record at _smtp._tls.yourdomain.com, separate from your MTA-STS and DMARC records. A typo in that host name is a common reason reports never arrive.

What does a TLS-RPT report contain?

It's a daily aggregate (JSON) summarizing how many TLS connections to your mail succeeded or failed and why — for example certificate or STARTTLS problems. It helps you spot delivery issues you'd otherwise never see.

Can I send reports to an HTTPS endpoint instead of email?

Yes. The rua tag accepts a mailto: address or an https: URL, so reports can post to a collector. Many teams use a third-party service to parse the JSON into readable dashboards.

Share this tool: X LinkedIn Facebook Reddit Email

We use essential cookies to run SJ Monitor (sign-in, security). See our privacy policy.