The MTA-STS policy is in testing mode.

MTASTS_MODE_TESTING · Severity: Warning

• WarningMTASTS_MODE_TESTING

  The MTA-STS policy is in testing mode.

  In testing mode senders report TLS failures through TLS-RPT but still deliver the mail, so the policy does not yet protect against downgrade attacks.

  Recommendation: Move to mode enforce once TLS-RPT reports show that all MX hosts pass.

Reported by

• Domain health check
• MTA-STS and TLS-RPT check

Available through the API

• Domain health check API
• MTA-STS and TLS-RPT check API

Related findings

• Info MTASTS_MODE_NONE The MTA-STS policy is in mode none.
• Error MTASTS_MULTIPLE_RECORDS More than one MTA-STS record is published.
• Error MTASTS_MX_NOT_COVERED An MX host is not covered by the enforced MTA-STS policy.
• Warning MTASTS_MX_NOT_COVERED_TESTING An MX host is not covered by the MTA-STS policy in testing mode.
• Error MTASTS_INVALID_POLICY The MTA-STS policy file is not valid.
• Error MTASTS_INVALID_RECORD The MTA-STS record has invalid syntax.

All findings