Record generator

MTA-STS record generator

Produce the _mta-sts TXT record and the matching policy file that tell senders to require TLS — and to refuse delivery when it is missing.

Domain

Used to build every record name and the policy URL below.

Mode

Mail servers (mx)

One hostname per line — must match the MX records receivers see. Wildcards like *.example.com are allowed.

Policy cache lifetime, in days (max_age)

How long receivers may cache the policy before re-fetching it. Keep this short while testing.

TLS-RPT report address

Optional — where receivers should send TLS connection failure reports for this domain.

Generated records

Look up the TXT records currently published for the domain above and compare them with the records you just built.

Not checked yet.