Nutter Tools
Nutter Tools

A free toolbox that runs in your browser. A tool for every job.

Your files never leave your device

Images

  • Convert images
  • Compress images
  • Resize images
  • Crop
  • Watermark

PDF & files

  • Merge PDFs
  • Split a PDF
  • Images to PDF
  • PDF to images
  • Remove photo location

Video & audio

  • Compress video
  • Convert video
  • Video to GIF
  • Convert audio
  • Trim audio

Everyday

  • QR codes
  • Passwords
  • Time zones
  • Unit converter
  • Word count
  • Webcam test

Developer

  • JSON formatter
  • Base64
  • Regex tester
  • Hashes
  • JWT decoder

Site

  • About
  • Contact
  • Settings
  • Privacy
  • Terms
  • Site map
  • llms.txt

Everyday

  • Images
  • Video
  • Audio
  • PDF & files
  • Text
  • QR codes
  • Units & math
  • Time & dates
  • Color
  • Passwords & IDs
  • Device tests
  • Sun & moon

For developers

  • JSON
  • Encoding
  • Regex & cron
  • Web & auth
  • Hashing & encryption
  • Config files
  • Network
  • Browser
  • AI
  • Fake data
© Nutter Toolsnutter.tools
  1. Home
  2. Network
  3. TLS-RPT checker
Your files stay on your device

TLS-RPT checker

Look up a domain's RFC 8460 TLS-RPT record over DNS-over-HTTPS and validate its version tag and reporting destinations.

This tool is in beta

Still being tested. If a result looks wrong, tell us.

Report a problem

Press the button to read the record

Nothing leaves this page until you do. The report reads one TXT record at _smtp._tls over your chosen resolver and grades it against RFC 8460: the v=TLSRPTv1 version tag, the rua= destinations, and the one-record-per-name rule.

SMTP TLS Reporting (RFC 8460) is the visibility half of the MTA-STS picture: when a sending MTA cannot open a TLS connection to your mail hosts, this record is where it is told to send its failure summary. Without it, a broken certificate or a downgrade attack fails silently on the sending side. This tool reads the record and grades its shape; it does not check the MTA-STS policy, and it never mails or POSTs anything to the reporting addresses it finds.

Query

The TXT record read is _smtp._tls.<domain>
Resolver

What leaves your browser

The one TXT query goes to the selected DoH resolver over HTTPS (DNS-over-HTTPS JSON) and nowhere else. The reporting URIs inside the record are validated, never contacted. This page leaves your browser only when you press the button; never on load, never in the background. Nothing is sent anywhere else. Google Analytics still measures the visit to this page, and it never receives what you run through this tool.

Runs on this device. Nothing is uploaded.

More network tools

  • Live DNS lookup
  • DNS explainer
All network tools

Was this tool useful?