MTA-STS is in testing mode

Check id: mta_sts.mode_testing · fix effort: low

What it means

Your mail encryption policy is announced but not enforced yet. One config change finishes the job.

The technical detail

mode: testing reports failures without affecting delivery. Switch to enforce once TLS-RPT reports look clean, and bump the id= in the TXT record.

How to fix it

  1. Review TLS-RPT reports for failures.
  2. Change the policy file to mode: enforce and bump the id= in the TXT record.

Does your domain have this problem?

Run a free scan, takes about ten seconds.