No TLS-RPT record — no visibility into email delivery failures
TLS-RPT is an email standard (RFC 8460) that sends you daily reports whenever another mail server fails to deliver email to you over an encrypted connection. This record is not set up on your domain. Without these reports you have no visibility into email encryption failures. Attackers or misconfigured servers could be forcing unencrypted email delivery without you knowing, exposing message contents. Ask your IT provider or DNS manager to add a TLS-RPT TXT record pointing to a monitoring inbox. Most DMARC and email security dashboards — such as Dmarcian, Postmark, or Valimail — also accept TLS-RPT reports automatically.
Why this matters
Without these reports you have no visibility into email encryption failures. Attackers or misconfigured servers could be forcing unencrypted email delivery without you knowing, exposing message contents.
How to fix it
Ask your IT provider or DNS manager to add a TLS-RPT TXT record pointing to a monitoring inbox. Most DMARC and email security dashboards — such as Dmarcian, Postmark, or Valimail — also accept TLS-RPT reports automatically.