ciunkos.com/Glossary

Email authentication

MTA-STS and TLS-RPT

A policy that makes senders deliver to you only over verified encryption, plus reports when it fails.

Without MTA-STS, anyone on the network path can downgrade mail to you to unencrypted delivery. MTA-STS is a TXT record and a policy file at mta-sts.yourdomain listing your mail servers; TLS-RPT tells senders where to report failures. Start in testing mode, read the reports, then enforce.

Share: LinkedIn · X ·

Related terms

  • DMARC: The policy that tells receivers what to do when mail fails SPF and DKIM, and where to report.
  • SPF (Sender Policy Framework): A DNS record listing which servers may send email for your domain.

← All terms

Need this built, fixed or reviewed?

I build and rescue products with AI coding agents under rules: AI features in production, honest estimates, email that gets delivered.

Przemysław Zalewski

How I work

Przemysław Zalewski · 15+ years shipping software

“a true bias for action” client CTO, public LinkedIn recommendation

All principles and risk levels →