Introducing hosted MTA-STS

Today we’re launching hosted MTA-STS, a new feature that lets you delegate the hosting and management of MTA-STS policies for your domains to DMARCwise.

MTA-STS is a standard that helps protect email delivered to your domains from connection downgrade and server impersonation attacks. It lets you require sending mail servers to use an encrypted, authenticated SMTP connection and deliver only to authorized MX servers. It is widely supported by email providers.

With the hosted service, you can manage the policy directly from the DMARCwise dashboard instead of operating MTA-STS yourself. DMARCwise takes care of:

• Publishing the policy and its discovery record in the correct order.
• Serving the policy over HTTPS.
• Issuing and renewing the TLS certificate for the policy host.
• Detecting changes to your MX servers and keeping the policy synchronized automatically.
• Monitoring the DNS records and certificate to alert you when they need attention.

We strongly recommend using MTA-STS together with SMTP TLS reports. New policies start safely in testing mode, so you can review TLS reports before moving to enforcement.

Hosted MTA-STS is included with all paid plans. To learn more about the feature and how to set it up, visit the hosted MTA-STS documentation.