---
title: Partner Domains TLS · Cloudflare Email security (formerly Area 1) docs
description: To add additional TLS requirements for emails coming from certain
  domains, you can enforce higher levels of SSL/TLS inspection. If TLS is
  required, mail without TLS from the specified domain will be dropped.
lastUpdated: 2025-10-27T15:00:52.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/email-security/email-configuration/domains-and-routing/partner-domains-tls/
  md: https://developers.cloudflare.com/email-security/email-configuration/domains-and-routing/partner-domains-tls/index.md
---

To add additional TLS requirements for emails coming from certain domains, you can enforce higher levels of SSL/TLS inspection. If TLS is required, mail without TLS from the specified domain will be dropped.

## Add a domain

To require that email from a specific domain passes SSL/TLS inspection:

1. Log in to the [Email security dashboard](https://horizon.area1security.com/).
2. Go to **Settings** (the gear icon).
3. On **Email Configuration**, go to **Domains & Routing** > **Partner Domains TLS**.
4. Select **New Partner Domain**.
5. Enter a **Domain** and any **Notes**.
6. Select **Save**.

## Exempt TLS inspection

If you decide to exempt a domain from TLS inspection - by toggling **Require TLS Inbound** to **Off** - this will not turn off enforcement against legacy standards like SSLv1, SSLv2, and TLSv1, which is generally considered insecure.
