MTA-STS Policy Generator
Produces the `.well-known/mta-sts.txt` policy file and the `_mta-sts` DNS TXT record so receiving servers enforce TLS when delivering mail to you.
version: STSv1 mode: testing mx: mail.example.com mx: *.mail.example.com max_age: 604800
v=STSv1; id=1791614124381
Made it. Now see what happens after you send.
Outsolvi tracks your email once it leaves your outbox: which opens were a person and which were a machine, who clicked, and who replied. Follow-ups stop on their own when someone answers. Outlook and Gmail, from $7/user/mo billed yearly.
Track your next sendBuilds the MTA-STS policy file (version, mode, mx, max_age) plus the matching DNS record with a policy ID, using the MX patterns and enforcement mode you choose. Publish the policy at the required .well-known path, then verify it with an external MTA-STS checker.
When you receive sensitive mail and want stronger transport encryption guarantees than opportunistic STARTTLS. Required for some compliance regimes.
FAQ
Testing vs enforce mode?+
Start at testing for 14 days. Watch SMTP TLS reports. Move to enforce only after you confirm no senders are stuck on plaintext.
Does MTA-STS protect outbound mail?+
No. MTA-STS is inbound-only, it tells other servers how to encrypt mail TO you. For outbound, your own MTA must respect MTA-STS policies on the receiving side.
Keep going
Articles, glossary entries, and other tools on the same topic.
Nate built Outsolvi after watching every email-tracking tool he had ever used lie to him about opens. Outsolvi grades every open as a person or a machine, in Outlook and Gmail, so the number on the dashboard is one a rep can actually act on.
We update these pages when the underlying mechanics change. new mailbox-provider rules, new tracker behavior, new measurement gaps. The dates above are real revisions, not auto-touches.