Related articles

Other tools

DANE/TLSA validator for inbound SMTP services

With this tool you can inspect and validate TLSA DNS record(s) for DANE support of inbound SMTP services (MX hosts). DANE is specified in rfc7671. The TLSA resource record is specified in rfc6698.

A DANE TLSA record for SMTP services should be located at _25._tcp.[mx-host], where mx-host is the hostname of the inbound SMTP (MX) service.

Note: submit the MX host name (not the domain name) in the input box.

This tool verifies the correctness of the syntax of the TLSA record, it does not (yet) perform matching of the TLSA records against the SMTP server certificate.

Like email hardening?

Mailhardener is the all-in-one email hardening solution. Use it to implement and monitor all email hardening techniques such as DMARC, DKIM, SPF, MTA-STS, SMTP TLS reporting, BIMI, DANE and more.
Try it now (it's free!)