Free tool
DANE / TLSA checker
Enter a domain to see whether its mail servers publish a DNSSEC-signed TLSA record, so senders can verify your certificate and mail can't be silently downgraded.
What this tells you
DANE lets a sending mail server verify your certificate against a DNSSEC-signed TLSA record, so mail to you can’t be silently downgraded or intercepted. This tool checks whether your mail host publishes that record and whether it’s DNSSEC-signed. It can’t see whether your live certificate still matches, which is the check that catches a silent mail outage after a certificate renewal, and that’s exactly what DMARCER monitors. Run a full check to see your complete posture.
What is DANE? →
The basics, in plain English.
MTA-STS checker →
The other transport-security control.
All free tools →
DMARC, SPF, DNSSEC and more.