DANE / TLSA checker
Are your mail servers pinned with DANE, so senders can verify their certificates through DNSSEC?
Live lookupPlain English + technicalFree, no sign-upBeta
Good to know: Checks your TLSA records and that your mail servers’ DNS is signed with DNSSEC. It doesn’t compare TLSA to the certificate on port 25.
About the DANE / TLSA
Check DANE TLSA records for a domain’s mail servers and whether the MX records are signed with DNSSEC.
Every result comes in two styles: plain English for everyone, and the exact technical detail for engineers, with the raw JSON one click away.