About tlspeek

tlspeek is a small set of tools for people who publish mail DNS or HTTPS and want to read the public result without a login. The tools cover SPF, DMARC, DKIM, MX, MTA-STS, CAA, BIMI, and response headers. A few forms stay entirely in the browser.

Mail checks ask Cloudflare's public DNS resolver for the records you named. The header check and the MTA-STS policy fetch use one HTTP GET on port 443, or port 80 for headers, and follow only a few public redirects. Names that resolve to private or reserved addresses are refused before any connection. The SPF, DMARC, password, and JWT forms do not send what you type.

There is no account. The site does not store the domains, selectors, or records you ask about. Theme choice stays in this browser. A later version may show labeled ads and affiliate links. Those slots are empty today, and no ad script is loaded.

The DMARC generator builds a TXT value on your device. Publishing it is something you do at the DNS host for that domain.