TLS-RPT Checker

Query the TLS-RPT DNS TXT record at _smtp._tls.<domain> to find the report aggregation addresses (rua=) that receive TLS handshake failure reports. Complements MTA-STS by giving the domain operator visibility when TLS enforcement fails in practice.