DNS Record Generator
Generate properly formatted DNS TXT records for email authentication and security.
MTA-STS Record & Policy Generator
Enforce TLS encryption for inbound email to your domain (RFC 8461).
Requirement: MTA-STS requires hosting a policy file at
https://mta-sts.yourdomain.com/.well-known/mta-sts.txt. You need a valid TLS certificate for the mta-sts subdomain. 1. DNS TXT Record
DNS Record Type: TXT
Host/Name: _mta-sts
Value:
2. Policy File
Host this file at:
Setup Instructions
- Create a DNS A/CNAME record for
mta-sts.yourdomain.compointing to a web server - Obtain a TLS certificate for
mta-sts.yourdomain.com - Host the policy file at the URL shown above
- Add the DNS TXT record at
_mta-sts.yourdomain.com - Consider also adding a TLS-RPT record to receive failure reports