No TLS-RPT record — no visibility into email delivery failures

TLS-RPT is an email standard (RFC 8460) that sends you daily reports whenever another mail server fails to deliver email to you over an encrypted connection. This record is not set up on your domain. Without these reports you have no visibility into email encryption failures. Attackers or misconfigured servers could be forcing unencrypted email delivery without you knowing, exposing message contents. Ask your IT provider or DNS manager to add a TLS-RPT TXT record pointing to a monitoring inbox. Most DMARC and email security dashboards — such as Dmarcian, Postmark, or Valimail — also accept TLS-RPT reports automatically.

Why this matters

Without these reports you have no visibility into email encryption failures. Attackers or misconfigured servers could be forcing unencrypted email delivery without you knowing, exposing message contents.

How to fix it

Ask your IT provider or DNS manager to add a TLS-RPT TXT record pointing to a monitoring inbox. Most DMARC and email security dashboards — such as Dmarcian, Postmark, or Valimail — also accept TLS-RPT reports automatically.