Partner Domains TLS
To add additional TLS requirements for emails coming from certain domains, you can enforce higher levels of SSL/TLS inspection. If TLS is required, mail without TLS from the specified domain will be dropped.
To require that email from a specific domain passes SSL/TLS inspection:
- Log in to the Email Security dashboard ↗.
- Go to Settings (the gear icon).
- On Email Configuration, go to Domains & Routing > Partner Domains TLS.
- Select New Partner Domain.
- Enter a Domain and any Notes.
- Select Save.
If you decide to exempt a domain from TLS inspection - by toggling Require TLS Inbound to Off - this will not turn off enforcement against legacy standards like SSLv1, SSLv2, and TLSv1, which is generally considered insecure.