Enforced Encryption

MTA-STS Hosting

Enforce encryption for inbound emails. Prevent man-in-the-middle attacks by telling sending servers that you only accept secure connections.

mta-sts.txt
_mta-sts (DNS)
version: STSv1
mode: enforce
mx: *.google.com
max_age: 604800

// DNS Configuration

TXT_mta-sts.yourdomain.com
v=STSv1; id=20240101;

Beyond STARTTLS

Mandatory Encryption for Email

Traditional email encryption is opportunistic—attackers can downgrade it to plain text. MTA-STS stops this by forcing encrypted connections.

Force TLS

Tell external mail servers that you strictly require encryption. If they can't encrypt, they shouldn't send.

Prevent Downgrades

Stop man-in-the-middle attacks where hackers strip encryption from email traffic.

Zero-Config Hosting

We host the required HTTPS policy file for you, so you don't need to manage a separate web server.