It appears that Keith Moore <moore@xxxxxxxxxxxxxxxxxxxx> said: >> How much do we think 'transmitted in cleartext' exists anymore? >TLS is still negotiated on a per-hop basis, and STARTTLS is subject to >downgrading attacks from well-placed intermediaries. Only for domains that don't support MTA-STS or DANE TLSA. I think you will find that the majority of mail operators, certainly by volume, support at least one of them. R's, John