How to Set Up TLS-RPT

TLS-RPT (RFC 8460) configures sending mail servers to send you daily aggregate reports about TLS connection failures when delivering mail to you. Essential when running MTA-STS so you can spot misconfigurations before they affect inbound mail.

Try our Email checker

Publish the TXT record

Add a TXT at _smtp._tls.: v=TLSRPTv1; rua=mailto:tls-reports@. You can list multiple destinations comma-separated.

Set up a parser

Reports arrive as gzipped JSON. Open-source parsers exist (parsedmarc dmarc-srg) — or use a hosted service. CheckFast Pro can ingest TLS-RPT and surface failures alongside your other monitoring.

What you'll see

Reports include success/failure counts per sending domain failure types (certificate-name-mismatch certificate-expired validation-failure etc.) and failed receiving MX hosts. Use these to fix issues before users notice.

Want to verify your setup?

Run the check now