Answers to common questions about MTA-STS policies, TLS reporting, and enforcement.
MTA-STS lets a domain publish a policy requiring SMTP delivery to use valid TLS. It helps protect inbound mail against downgrade and interception attacks.
It protects inbound delivery to your domain when sending servers honor your policy. Your outbound mail is protected by the recipient domain's policy, if they publish one.
MTA-STS needs an _mta-sts TXT record and an HTTPS policy file at the standard mta-sts host. TLS reporting uses a separate _smtp._tls TXT record.
Yes. Testing mode lets you collect TLS reports and fix certificate, MX, and policy issues before moving to enforce mode.
In enforce mode, senders that honor MTA-STS can defer or fail delivery if your MX hosts or TLS certificates do not match the policy.
Start monitoring your DMARC reports today
What you'll get with Suped
Real-time DMARC report monitoring and analysis
Automated alerts for authentication failures
Clear recommendations to improve email deliverability
