Verify MTA-STS policy, TLS-RPT record, and policy file for inbound TLS enforcement
MTA-STS (Mail Transfer Agent Strict Transport Security) forces sending servers to use TLS when delivering email to your domain, preventing downgrade attacks. It requires a DNS record, a hosted policy file, and optionally a TLS-RPT record to receive failure reports.