MTA-STS (email encrypted in transit)
MTA-STS (Mail Transfer Agent Strict Transport Security) is a standard that enforces TLS encryption for inbound emails to your domain. Withou…
Analyse my site for freeHow TheSiteFuse checks "MTA-STS (email encrypted in transit)"
MTA-STS (Mail Transfer Agent Strict Transport Security) is a standard that enforces TLS encryption for inbound emails to your domain. Without MTA-STS, an attacker on the network path can force email servers to send messages in the clear (TLS downgrade attack). The _mta-sts TXT record publishes the policy and security policy URL.
Real-world impact of "MTA-STS (email encrypted in transit)"
MTA-STS protects the privacy of inbound emails. Without it, malicious actors between two email servers can read messages in transit. While less well-known than SPF/DKIM/DMARC, it completes the email security stack and is recommended by modern RFCs.
Does your site pass this check?
Run the free full audit (120 checks) and instantly discover what needs fixing.