# No TLS Reporting from Google

**URL:** <https://forum.dmarcian.com/t/no-tls-reporting-from-google/1400>\
**Category:** Community Area\
**Created:** [November 18, 2020, 1:47am UTC](https://forum.dmarcian.com/t/no-tls-reporting-from-google/1400 "2020-11-18T01:47:13Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![bill](https://avatars.discourse-cdn.com/v4/letter/b/ac91a4/32.png) [@bill](https://forum.dmarcian.com/u/bill)\
**Post date:** [November 18, 2020, 1:47am UTC](https://forum.dmarcian.com/t/no-tls-reporting-from-google/1400/1 "2020-11-18T01:47:13Z")

</div>

I setup **MTA-STS** and **TLS-RPT** on several domains so I could test _TLS Reports_ in DMARCian. 2 domains use _Microsoft Exchange_ server for mail. I am receiving TSL-RPT reports from them. 2 domains use _Google Suite_ for mail. I receive no reports at all from Google.

I thought Google supported TLS-RPT… Has anyone else experienced this?

---

<div class="post-metadata">

**Author:** ![Asher](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/asher/32/104_2.png) [@Asher](https://forum.dmarcian.com/u/Asher)\
**Post date:** [November 27, 2020, 6:14pm UTC](https://forum.dmarcian.com/t/no-tls-reporting-from-google/1400/2 "2020-11-27T18:14:30Z")

</div>

Hi Bill,

I have tested this myself with my domain, and I have not experienced any issues receiving reports from Google. However I am somewhat confused by your comment stating 2 domains use Google. Are you stating you sent emails from one of your Google domain to another, and did not receiver Google reports?

-AM

---

<div class="post-metadata">

**Author:** ![bill](https://avatars.discourse-cdn.com/v4/letter/b/ac91a4/32.png) [@bill](https://forum.dmarcian.com/u/bill)\
**Post date:** [November 27, 2020, 11:47pm UTC](https://forum.dmarcian.com/t/no-tls-reporting-from-google/1400/3 "2020-11-27T23:47:42Z")

</div>

To clarify, I am referring to the **TLS Manager** , which is marked as Beta on my DMARCian control panel, not normal DMARC reports.

The 2 domains that use **Microsoft Exchange** have sent thousands of **TLS-RPT** messages, which have populated the TLS Reporting tab. This indicates the number of successful or failed TLS connections to the MX server following my MTA-STS policy.

The 2 domains that use **Google Suite** have not sent an single TLS-RPT message according to the the reporting tab.

---

<div class="post-metadata">

**Author:** ![Asher](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/asher/32/104_2.png) [@Asher](https://forum.dmarcian.com/u/Asher)\
**Post date:** [December 7, 2020, 1:38pm UTC](https://forum.dmarcian.com/t/no-tls-reporting-from-google/1400/4 "2020-12-07T13:38:32Z")

</div>

Thank you for your response. I did understand what you meant. My confusion stems from the fact TLS Reports are sent by organizations that deliver to your domain. Also I assume you mean hosted Exchange (Exchange Online, or 365) as on premise exchange has no TLS-RPT capabilities. I am attempting to confirm that the behaviour your are expecting of TLS reporting is in fact correct in line with the TLS-RPT specification.

---

<div class="post-metadata">

**Author:** ![bill](https://avatars.discourse-cdn.com/v4/letter/b/ac91a4/32.png) [@bill](https://forum.dmarcian.com/u/bill)\
**Post date:** [December 7, 2020, 10:34pm UTC](https://forum.dmarcian.com/t/no-tls-reporting-from-google/1400/5 "2020-12-07T22:34:43Z")

</div>

I’m still trying to learn about this too, so I may not be explaining this properly.

The domains using Exchange servers are receiving the most TLSRPT reports.  
One domain is using the hybrid on-premise/online Exchange server. The other is just online/365. Those domains immediately started receiving TLS reports on DMARCian as soon as I setup my MTA-STS policy and TLS reporting.

My understanding was that [Google products supported MTS-STS from April 2019](https://security.googleblog.com/2019/04/gmail-making-email-more-secure-with-mta.html). So I was surprised that I was not receiving any reports from those domains using Google Suite. However, after 20 days or so, I am starting to see a few reports from those domains now as well.

However, as you say, the TLS reports are from senders attempting to connect to your SMTP, so the mail server of the destination domain may not be the factor I should be looking at.

---

<div class="post-metadata">

**Author:** ![Asher](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/asher/32/104_2.png) [@Asher](https://forum.dmarcian.com/u/Asher)\
**Post date:** [December 18, 2020, 3:06pm UTC](https://forum.dmarcian.com/t/no-tls-reporting-from-google/1400/6 "2020-12-18T15:06:30Z")

</div>

I believe with your explanation that you are likely on the correct course of deduction. I would surmise at this point that your domains hosted on Google are likely not receiving as much emails from sender that support sending of TLS Reporting. As long as you receive some, then your policy is unlikely to be the culprit, but much more likely the lack of adoption by senders to these domains.
