All about MTA-STS

Email DNS Records

https://blog.hardill.me.uk/2025/12/14/email-dns-records/

DKIM | DMARC | DNS | Email | MTA-STS | SPF | Security

Ben Hardill reviews the DNS records that support email security and deliverability for hardill.me.uk. The post explains SPF, DKIM and DMARC as TXT records and gives concrete examples. It shows MX records for mail routing and options for client auto-configuration using SRV or .well-known. It covers MTA-STS (TXT + HTTPS file) to enforce TLS for inbound delivery and TLS-Reporting for telemetry. The author demonstrates parsing DMARC reports (zipped XML) with parsedmarc and a visualizer to inspect compliance. Practical tips include SPF syntax, DKIM selectors, DMARC rua reporting, and the t=s flag for subdomains.