Level: Advanced
TLS Reporting works alongside MTA-STS, giving domain owners visibility into TLS negotiation failures that would otherwise go completely unnoticed.
It Reports on Encryption Failures Specifically
TLS-RPT generates reports detailing instances where a secure connection couldn't be established for mail destined to your domain, surfacing a category of delivery issue that's otherwise invisible.
Reports Arrive as Structured JSON From Participating Senders
Major mail providers that support the standard send periodic, structured reports summarizing successful and failed TLS negotiation attempts for mail sent to your domain.
It Pairs Naturally With an MTA-STS Deployment
Since TLS-RPT specifically monitors the kind of enforcement MTA-STS introduces, implementing both together gives you both the protection and the visibility into whether it's working as intended.
Next step: Use the Find DNS Records to check your domain's current DNS setup for a TLS-RPT record alongside your MTA-STS configuration.