TLS-RPT record
A TLS-RPT (SMTP TLS reporting) record asks other mail servers to send you a daily report of any problems they had making encrypted connections to deliver your mail. It goes hand in hand with MTA-STS and DANE.
| Record type | TXT (TLS-RPT is a standard carried in TXT records) |
|---|---|
| Lives at | _smtp._tls |
| Used for | |
| How common | Common |
| Defined in | RFC 8460 |
Format
_smtp._tls <ttl> IN TXT "v=TLSRPTv1; rua=mailto:<address>"
| Field | What it means | Accepted values |
|---|---|---|
| v=TLSRPTv1 | Marks the record. | TLSRPTv1 |
| rua= | Where reports go. | mailto: addresses or https: URLs, comma-separated. |
Check a TLS-RPT record
Type or paste a record in zone-file form (name, TTL, type, value) or just its value. Each part is explained as you type.
A valid TXT record (TLS reporting).
| Part | What it means |
|---|---|
| Name_smtp._tls | A service name. Underscore names hold records for a protocol (such as _dmarc or _sip._tcp), not a website. |
| TTL3600 | Resolvers may keep this answer for 1 hour before asking again. Changes can take that long to reach everyone. |
| ClassIN | Internet. Every record you'll write uses IN. |
| TypeTXT | Free text: SPF, DKIM, DMARC, verification. |
| Textv=TLSRPTv1; rua=mailto:tls-reports@example.com | 46 bytes. |
| vv=TLSRPTv1 | Must be TLSRPTv1. |
| ruarua=mailto:tls-reports@example.com | Where daily reports about TLS failures on mail to you are sent: mailto: addresses or https: URLs, separated by commas. |
Examples
Reports by email
_smtp._tls 3600 IN TXT "v=TLSRPTv1; rua=mailto:tls-reports@example.com"
Google, Microsoft and others send daily JSON reports.
See it on a real domain
TTL
3600. How TTL works
Common mistakes
- Publishing at _tls or _smtp instead of _smtp._tls.
- Forgetting mailto: before the address.
At your DNS host
- Any DNS host: a TXT record at _smtp._tls.
Questions
What's in a TLS-RPT report?
Counts of successful and failed encrypted deliveries to your mail servers, with failure reasons such as an expired certificate or a mismatch with your MTA-STS policy.
This page is also available as Markdown.
Lemon Domains keeps every domain you own in one place, with expiry reminders, change monitoring and DNS editing from your AI assistant. Get started free