However, the background processes arent that simple.
Assurity of TLS use when transferring mail does not eliminate but reduces the risk of outside threats.
It declares support for a TLS connection, so that it is used every time for the configured domain.
This is known asTLS Reporting.
Why need MTA-STS?
MTA-STS resolves that issue, preventing downgrade attacks.
Additionally, it also addresses the issue of expired TLS certificates.
On the other hand, TLS reporting also adds a few benefits.
TLS reporting informs you about email connections that succeeded or failed and helps diagnose issues related to TLS negotiation.
However, there is more to it than meets the eye.
It finds that the domain supports a TLS connection, and initiates a TLS handshake.
Simultaneously, the MTA-STS DNS record specifies where the mail server can fetch a policy file.
The policy file is fetched via HTTPS and authenticated with certificates.
When the policy file is retrieved, the sending SMTP server checks the recipient domains MTA-STS policy.
If the TL connection fails and the policy is configured to reject it, the email is rejected.
This explains the topological function of MTA-STS.
This is further clarified when you attempt to configure MTA-STS for your domain.
I have split the configuration steps for MTa-STS DNS records and the policy file for better understanding.
How to configure MTA-STS DNS records
As mentioned earlier, the MTA-STS had a two-part DNS record.
Nonetheless, the same logic applies.
Log into your DNS server as an administrator.
When done, clickSave Record.
With the completion of these steps, you will have successfully configured the MTA-STS records for your domain.
However, you must still configure the MTA-STS policy on the hosting.
Moreover, you might also need to create the .well-known folder in the subdomain, if not already exist.
We have already discussed the authentication mechanisms in place which include SPF, DKIM, and DMARC.
0
Get weekly insights, tips and exclusive content delivered straight to your inbox.
Talk to us straight and get your questions answered right away
source: www.itechtics.com
