What are the policy modes (enforce, testing, none)?

testing observes without enforcing and acts like none while enabling TLS RPT reporting to help you discover problems before enforcement.

enforce applies the rules strictly and blocks mail if the encrypted channel or certificate validation fails.

none disables the policy while leaving the framework intact which allows a domain owner to step down safely from enforcement.

Was this answer helpful?

Thanks for your feedback!