Skip to content
Transport reports

Check TLS-RPT

Check the TLS-RPT record, reporting URI syntax and DNS evidence.

Enter only the domain, such as example.com – without https://, a path or an email address.

A new check is available every 5 minutes per tool and domain. Until then, you see the saved result.

What the tool accesses

DNS.

How the check works

What exactly is checked?

  1. Query the TXT record under _smtp._tls through validating resolvers.
  2. Select exactly one TLSRPTv1 policy and check its syntax.
  3. Normalize rua destinations and show the published aggregate report recipients.
  4. Evaluate DNSSEC, resolver agreement, TTL and the expected report address.
Assessment

How is the result determined?

Passed means there is exactly one syntactically valid TLS-RPT record with a usable aggregate report recipient. The public check does not send a test report or contact a mailto address.

Checker
2.0.0
What the tool accesses
DNS
Technical standards and sources
RFC 8460

A technical snapshot, not a certificate or a delivery guarantee. Methodology public-tools-v1. Reviewed on 20.08.2026.