Glossary · Security and privacy
TLS-RPT
A DNS record naming an address that receives daily reports of TLS failures when other servers deliver mail to your domain.
What TLS-RPT means
A DNS record naming an address that receives daily reports of TLS failures when other servers deliver mail to your domain. It is how an MTA-STS policy is monitored before it is enforced; the address has to exist, or the reports bounce into nothing.
What TLS-RPT can and cannot support
| It can support | It cannot support |
|---|---|
| A DNS record naming an address that receives daily reports of TLS failures when other servers deliver mail to your domain. | It is how an MTA-STS policy is monitored before it is enforced; the address has to exist, or the reports bounce into nothing. |
Where TLS-RPT comes up on this site
- DMARC p=none to p=quarantine without losing mail: a guideThe neighbouring pieces, an MTA-STS policy to stop transport downgrade and a TLS-RPT address to hear about it, are described on the trust center ; the single-character bounce that started this work is in its own post .
Terms this definition uses
Definitions that name TLS-RPT
Related terms in Security and privacy
Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
Indirect prompt injection · Direct prompt injection · Jailbreak · Data exfiltration · Sensitive information disclosure · Secret leakage · Insecure output handling · Excessive agency · Least privilege · Trust boundary · Input validation · Output validation · Allowlist · Denylist · SSRF · RCE · Credential scope · OAuth scope · API key · Bearer token · mTLS · Rate-limit policy · Audit log · PII · Data minimization · Purpose limitation · Retention period · Data residency · Tenant isolation · Threat model · DMARC · DMARC alignment · SPF · DKIM · MTA-STS · CAA record · DNSSEC · hard bounce
Questions about TLS-RPT
What is TLS-RPT?
A DNS record naming an address that receives daily reports of TLS failures when other servers deliver mail to your domain.
What does TLS-RPT not show or guarantee?
It is how an MTA-STS policy is monitored before it is enforced; the address has to exist, or the reports bounce into nothing.
Which area of the glossary does TLS-RPT belong to?
Security and privacy: Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
← MTA-STS · CAA record →
See it in the full glossary · 668 terms across 19 areas.