ACAP/TLS

Hello,

Is there a specification for using ACAP in combination with TLS, either on 
a separate port or with a Start-TLS command?

(A goal would be to establish a confidential association between the client
and server and use the SASL "EXTERNAL" mechanism to pick up the client's
identity from its certificate path.)

Thanks in advance,

Mark Wahl, Enterprise Directory Integration
Critical Angle Inc.