MTA-STS is switched off (mode none)

Check id: mta_sts.mode_none · fix effort: low

What it means

Your mail encryption policy is switched off. It's telling senders to apply no protection at all.

The technical detail

mode: none instructs senders to discard any cached policy. It exists for decommissioning, not steady state.

How to fix it

  1. Set mode: testing, verify via TLS-RPT, then mode: enforce. and bump the TXT id=.

Does your domain have this problem?

Run a free scan, takes about ten seconds.