How to Set Up SMTP TLS Reports
SMTP stands for Simple Mail Transfer Protocol, while TLS refers to Transport Layer Security. This type of reporting allows you to monitor delivery of your sent email to a domain. These reports also provide feedback and data to help you identify and fix any issues during a message's journey.
To learn more about what SMTP TLS reports are and their benefits, click here.
To set up SMTP TLS Reporting (TLS-RPT), follow these steps:
-
Define a DNS TXT Record: Create a TXT record for the _smtp._tls subdomain of your email domain. This record will indicate your TLSRPT policy.
-
Specify the Policy: The TXT record should include the "v=TLSRPTv1" tag, followed by the "rua" (reporting URI) tag, which defines where to send the reports. You can use "mailto" or "https" URIs for report delivery.
Example TXT Record: _smtp._tls.yourdomain.com IN TXT "v=TLSRPTv1; rua=mailto:tlsrpt@yourdomain.com"
-
Configure Report Handling: Ensure you have a mechanism to receive and process the reports. These reports provide details on STARTTLS failures, helping you monitor and improve your email security.
Once configured, recipient domains will send you encrypted TLS reports, allowing you to identify and address STARTTLS issues proactively. For more details, see RFC 8460.