MTA-STS

MTA-STS (Mail Transfer Agent Strict Transport Security) is a policy published via DNS + HTTPS that tells sending servers they MUST use TLS when delivering mail to your domain. Without it, mail can be silently delivered in cleartext. Pairs naturally with DMARC + DKIM.