What is it?
TLS-RPT is a mail DNS record that tells external senders where to report SMTP TLS delivery problems for your domain. It is commonly used together with MTA-STS.
Why does it matter?
Without TLS-RPT, you have less visibility into failed encrypted mail delivery, certificate problems, MX mismatches, and MTA-STS policy issues reported by participating senders.
How to fix it?
Publish a TXT record at _smtp._tls.<domain> with a reporting address or HTTPS endpoint.
_smtp._tls.example.com. 3600 IN TXT "v=TLSRPTv1; rua=mailto:tlsrpt@example.com"Use a monitored mailbox or reporting service, then review reports before enforcing a strict MTA-STS policy.