MTA-STS Hosted Policy
Protect your domain from downgrade attacks. We host your MTA-STS policy files with automatic certificate management.
Enforce Encrypted Email Transport
MTA-STS ensures emails are always sent over encrypted TLS connections. We host your policy files with automatic certificate management - no infrastructure required.
Fully Managed MTA-STS
We handle everything - policy hosting, SSL certificates, and DNS configuration guidance.
Hosted Policy Files
We host your MTA-STS policy at the required .well-known path. No web server configuration needed on your end.
SSL Certificates
Automatic SSL certificate management. We handle renewals and ensure your policy is always served over HTTPS.
Policy Modes
Choose between testing, enforce, or none modes. Start in testing mode and move to enforce when ready.
DNS Setup Guide
Step-by-step DNS configuration instructions. Add two simple records and you're protected.
MX Server List
Define which mail servers are authorized to receive mail for your domain. Auto-detect from DNS.
Validation
Automatic validation of your MTA-STS setup. Verify DNS records and policy accessibility.
Technical Details
For IT teams and security professionals
MTA-STS Components
- • DNS TXT record at _mta-sts.domain.com
- • Policy file at https://mta-sts.domain.com/.well-known/mta-sts.txt
- • Policy ID for cache invalidation
- • max_age: Cache duration in seconds
Policy Modes
- • mode: testing - Report but allow delivery
- • mode: enforce - Reject non-compliant mail servers
- • mode: none - Disable enforcement
Example Policy File
version: STSv1
mode: enforce
mx: mail.example.com
mx: backup.example.com
max_age: 86400Free MTA-STS Tools
Related Features
Ready to Get Started?
Start your 14-day free trial and experience complete email security with MTA-STS Hosting.