# TLS-RPT record

A TLS-RPT (SMTP TLS reporting) record asks other mail servers to send you a daily report of any problems they had making encrypted connections to deliver your mail. It goes hand in hand with MTA-STS and DANE.

- Record type: TXT (TLS-RPT is carried in TXT records)
- Lives at: _smtp._tls
- Used for: Email
- How common: Common
- Defined in: RFC 8460

## Format

```
_smtp._tls <ttl> IN TXT "v=TLSRPTv1; rua=mailto:<address>"
```

| Field | What it means | Accepted values |
| --- | --- | --- |
| v=TLSRPTv1 | Marks the record. | `TLSRPTv1` |
| rua= | Where reports go. | `mailto:` addresses or `https:` URLs, comma-separated. |

## Examples

### Reports by email

```
_smtp._tls 3600 IN TXT "v=TLSRPTv1; rua=mailto:tls-reports@example.com"
```

Google, Microsoft and others send daily JSON reports.

## TTL

3600.

## Common mistakes

- Publishing at _tls or _smtp instead of _smtp._tls.
- Forgetting mailto: before the address.

## At your DNS host

- Any DNS host: a TXT record at _smtp._tls.

## Questions

### What's in a TLS-RPT report?

Counts of successful and failed encrypted deliveries to your mail servers, with failure reasons such as an expired certificate or a mismatch with your MTA-STS policy.

## Related

- [MTA-STS record](https://lemon.domains/dns-records/mta-sts.md)
- [TLSA record](https://lemon.domains/dns-records/tlsa.md)
- [MX record](https://lemon.domains/dns-records/mx.md)

Interactive version with a record checker and live lookup: https://lemon.domains/dns-records/tls-rpt