Blog
Tagged “tls-rpt”
AllGuidesProduct & newsForwarding & listsFundamentalsDMARCSPFDKIMBIMITransport securityDeliverabilityThreats & fraudCompliance & industriesProvider setupStandards & RFCsHow-to guidesTroubleshooting
2 articles
Email transport security: STARTTLS, MTA-STS, DANE
DMARC proves who sent a message, but it does nothing to protect that message while it crosses the internet. Here is how opportunistic STARTTLS, MTA-STS, DANE and TLS-RPT work together to keep inbound mail encrypted in transit, why STARTTLS alone is trivially downgraded, and the safe order to deploy enforcement without bouncing legitimate mail.
Read more
What is TLS-RPT?
TLS-RPT (SMTP TLS Reporting) is a single safe-to-publish DNS record that gives you a daily, machine-readable summary of how other mail servers negotiated encryption with your inbound MX hosts. Learn what the record and its JSON reports contain, how to decode each failure type, and the exact publish-then-enforce workflow that pairs it with MTA-STS without risking an email outage.
Read more