Last updated: July 2026
In short: After this guide your domain at united-domains publishes a TLS-RPT record and receives daily reports on encrypted delivery.
Prerequisites
- A domain in the united-domains portfolio with united-domains nameservers
- A destination for the reports (analysis service or mailbox)
What is TLS-RPT?
TLS-RPT (SMTP TLS Reporting, RFC 8460) is a DNS TXT record under _smtp._tls.your-domain. Receiving mail servers send daily aggregate reports on TLS delivery to the rua address named there. TLS-RPT enforces nothing — it shows you whether your encryption and a later MTA-STS protection work in practice.
The starting point at united-domains
TLS-RPT is a normal TXT record. united-domains itself points out to be careful, “since incorrectly configured records can lead to email delivery problems or other issues”. But a cleanly set _smtp._tls record is harmless — it only reports.
Step-by-step guide
1. Set the report address
Decide where the reports go — ideally to a TLS-RPT analysis service that processes the JSON reports.
2. Open the DNS entries
Start at united-domains.de, log in via the user icon. Click the DNS symbol next to your domain and then DNS entries.
3. Add the TXT record
Go to the TXT (Text) section and click Add. Enter:
- Name/Host:
_smtp._tls - Value:
v=TLSRPTv1; rua=mailto:tlsrpt@beispiel.de
Click Save.
4. Wait until the change is live
Saved changes land in the united-domains nameservers immediately; until they’re adopted worldwide it can take up to 24 hours.
The components in detail
| Component | Meaning |
|---|---|
v=TLSRPTv1 | version identifier, always at the start |
rua=mailto: | address the daily TLS reports go to |
Separate multiple recipients with a comma; as an alternative to mailto:, an https: endpoint is also possible.
Verify the result
Check your configuration with the free MXAudit scanner — it shows you TLS-RPT together with your TLS and MTA-STS protection.
Common mistakes
Wrong hostname. The record belongs exactly at _smtp._tls — not at _tls or the bare domain.
Mistook TLS-RPT for enforcement. TLS-RPT only reports. Encryption is enforced by MTA-STS — TLS-RPT shows you whether it works.
Multiple v=TLSRPTv1 records. Exactly one TLS-RPT record belongs at _smtp._tls — not several.
Further reading
- united-domains help: Adding a TXT entry for a domain (German) (retrieved: July 10, 2026)
- RFC 8460 — SMTP TLS Reporting