Re: tmda-ofmipd: Internal support for SSL via tlslite package

Stephen Warren wrote:
+# FIXME: Enable this once STARTTLS is implemented
+#congroup.add_option("", "--tls",
+#                  action="store_true", default=False, dest="tls",
+#                  help= \
+#"""Enable TLS mode, i.e. the STARTTLS command. With this option
+#enabled, all AUTH commands are disabled until after STARTTLS has
+#been issued. This configuration is typically run on port 587
+#(submission).""")


Nice!

When you implement this, consider:

-tls = on/off/optional

on       = tls is always on and required
off      = tls is always off and not announced
optional = tls is announced and client can use tls or proceed w/o tls