TLS RPT Record Generator | iN2 Tools

Create an SMTP TLS Reporting (TLS RPT) DNS record to request aggregate reports about TLS encryption connection status.

TLS-RPT Record Generator & Reporting Policy Builder

Build RFC 8460 compliant SMTP TLS Reporting (TLS-RPT) DNS records. Request aggregate reports on inbound MTA-STS and DANE STARTTLS connection failures via mailto or HTTPS URIs.

TLS RPT Record Generator

Create an SMTP TLS Reporting (TLS RPT) DNS record to request aggregate reports from email receivers about TLS encryption connection issues and successes.

Generated TLS RPT Record

DNS Record Name / Host _smtp._tls.example.com
DNS Record Type TXT
v=TLSRPTv1; rua=mailto:tls-reports@example.com

Tag Explanations

Understanding SMTP TLS Reporting (RFC 8460)

SMTP TLS Reporting (TLS-RPT) defined in RFC 8460 allows email domain owners to collect aggregate JSON reports from sending Mail Transfer Agents (MTAs) whenever TLS connections fail due to certificate errors, expired policies, or negotiation failures.

Key Record Parameters

  • DNS Name: Must be published at _smtp._tls.domain.com.
  • v=TLSRPTv1: Mandatory version tag.
  • rua=: Destination URIs for JSON report delivery (e.g. mailto:reports@domain.com or https://api.domain.com/tls-rpt).

Related Email Security Standards