Nothing to do for MTA-STS on a domain that accepts no mail
Why it matters
MTA-STS protects incoming mail, and this domain publishes no mail servers, so there is nothing to protect. No policy is needed.
The fix
- Leave MTA-STS out. If you later start receiving mail on this domain, publish MX records first and then follow the MTA-STS fix.
Related
- Reported by the MTA-STS and TLS-RPT check
- Publish an MTA-STS policy, starting in testing mode
- Fix the MTA-STS TXT record
- Make the MTA-STS policy file reachable
- Fix the certificate on the MTA-STS policy host
- Fix the MTA-STS policy file
- Switch MTA-STS from testing to enforce
- Turn MTA-STS back on
- Make the MTA-STS policy cover every MX host
- Raise the MTA-STS max_age
- Publish a TLS-RPT record
- Fix the TLS-RPT record
Scan your domain to see whether this applies to you.