What it reads
Handshakes on three ports: 443 on your website, and 465 and 993 on your main mail server. A port that offers nothing newer than TLS 1.1 fails. So does a weak cipher, one without forward secrecy, or a SHA-1 certificate.
Check 30 of 54 · Web and TLS
TLS on mail ports, explained.
Encryption scrutiny for your main mail server as well as your website.
Engine 1.57.0, read 25 October 2026
Free checkScoredReliability: High
Is your website set up safely?
What the check does, and where it stops.
Why it matters
A hardened website with a weak mail server is still a weak front door.
What a failure looks like
A failure is a finding in your result. The check is scored, so it can lower your score, and the Full Report gives every finding its severity and a fix. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Where its limits are
Grades the ports that answer, and a port that is not exposed is not graded. Port 25, where inbound mail arrives, is not tested.
ReliabilityHigh: narrow, known blind spots
Check 30 is one of 15 in Web and TLS. See it in its row on the scanner page, beside the rest of Web and TLS.
See how your domain does.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.