Use the result to make the next technical decision.
MTA-STS combines a DNS version/ID signal with a policy served over HTTPS. The policy tells supporting senders which MX patterns are expected and how failures should be treated.
Mail security generator
Build the two pieces an MTA-STS deployment needs.
Generate the _mta-sts TXT identifier and HTTPS policy body together so MX patterns, mode and max_age can be reviewed as one deployment.
Generated values
Review before publishing
Read observations in context.
Do not switch a production domain to enforce until the HTTPS policy host, certificate and MX patterns are correct. This generator does not publish DNS or host the policy.
Marketing analytics never receive the target.
DotMoose records only the tool name and a coarse success/error outcome for marketing analytics. Active server diagnostics use bounded operational security logs without placing the entered domain, IP, URL, DNS answer or report contents into marketing telemetry.
Related tools