TLS-RPT Lookup
Check the SMTP TLS Reporting record (RFC 8460) for a domain. Verifies where TLS failure reports from sending MTAs are delivered.
Look up TLS-RPT
Queries the _smtp._tls.<domain> TXT record and parses the TLS-RPT (RFC 8460) policy.
What TLS-RPT is for
TLS-RPT tells sending MTAs: when TLS breaks on delivery to me, send a daily JSON report to this address. It’s the monitoring piece that pairs with MTA-STS and DANE — without it, you have no visibility into downgrade attacks or mis-issued certificates.
What the tool checks
- Queries
_smtp._tls.<domain>for a TXT record. - Confirms it starts with
v=TLSRPTv1. - Parses
rua=(reports destination) and any extension tags. - Flags missing
rua— a record with no destination is ineffective.
Privacy
Client-side DNS-over-HTTPS lookup via Google Public DNS. This site never sees the query.