The domain publishes no MTA-STS record.

MTASTS_NOT_FOUND · Severity: Info

• InfoMTASTS_NOT_FOUND

  The domain publishes no MTA-STS record.

  Without a TXT record starting with v=STSv1 at _mta-sts, senders do not look for an MTA-STS policy and may deliver mail without TLS if an attacker strips STARTTLS from the connection (RFC 8461).

  Recommendation: Publish an MTA-STS policy in testing mode first, together with a TLS-RPT record, and enforce it once the reports are clean.

Reported by

• Domain health check
• MTA-STS and TLS-RPT check

Available through the API

• Domain health check API
• MTA-STS and TLS-RPT check API

Related findings

• Error MTASTS_INVALID_POLICY The MTA-STS policy file is not valid.
• Error MTASTS_INVALID_RECORD The MTA-STS record has invalid syntax.
• Warning MTASTS_LOW_MAX_AGE The MTA-STS policy has a max_age below one day.
• Info MTASTS_MODE_NONE The MTA-STS policy is in mode none.
• Warning MTASTS_MODE_TESTING The MTA-STS policy is in testing mode.
• Error MTASTS_MULTIPLE_RECORDS More than one MTA-STS record is published.

All findings