tls.tlsrpt.lookup_error
TLS-RPT DNS Lookup Failed
What we check
We query DNS for the _smtp._tls.<domain> TXT record. This finding is emitted when the lookup returns a transient error instead of a definitive answer.
What this finding means
The DNS query for the TLS-RPT record failed with a transient error. We cannot determine whether a TLS-RPT record exists.
Why it matters
- Incomplete assessment. Without a successful lookup, we cannot evaluate TLS-RPT status.
- No delivery impact. TLS-RPT is a reporting mechanism — a lookup failure does not affect mail delivery.
How to fix
- Check DNS health for the domain.
- Re-run the scan after resolving DNS issues.
How it's graded
A TLS-RPT DNS lookup error is an informational finding with no grading penalty. See Grading Methodology for the full scoring model.
Evidence example
$ dig +short TXT _smtp._tls.example.com
;; connection timed out
TLS-RPT DNS lookup failed — status indeterminate