Posts tagged: mta-sts
Fix "MTA-STS Policy Is Missing: STSFetchResult.NONE"
Seeing "MTA-STS policy is missing: STSFetchResult.NONE"? Diagnose it in 3 stages — DNS TXT record, HTTPS policy fetch, TLS cert — with copy-paste commands.
DORA Compliance for Email: Map DMARC to Art. 9-11
DORA compliance for email, mapped to Articles 9, 10 and 11. How DMARC, SPF, MTA-STS and TLS-RPT meet the regulation's data-in-transit duties.
MTA-STS vs DANE: Verdict by Scenario (2026 Data)
Only 0.3% of 5.5M domains publish MTA-STS; 0.0% publish DANE. Get the per-scenario verdict, RFC 8461 vs 7672, Microsoft's connector modes, and NIS2 fit.
NIS2 Email Security: Article 21 → DMARC, MTA-STS, DANE
NIS2 compliance: map Article 21(2) to email auth — DMARC, SPF, MTA-STS, DANE, TLS-RPT. The control map, copy-paste DNS checks, and a 2026 readiness plan.
MTA-STS Example: Working Policy File & DNS Record [2026]
Copy-paste a working MTA-STS DNS record and .well-known policy file. RFC 8461 examples for Google Workspace, Microsoft 365, Postfix, plus mode progression and validators.
TLS-RPT Reports: SMTP TLS Reporting Explained (RFC 8460)
TLS-RPT reports tell you when SMTP TLS fails between mail servers. See an annotated RFC 8460 JSON example, every result type, and how to set it up.
DANE Email Authentication: Why 0.0% of Domains Use It
DANE binds TLS certificates to DNS via DNSSEC — but only 30 of 5.5M scanned domains use it. Inside RFC 7672, TLSA records, NIS2, and DANE vs MTA-STS.