Comment by throw0101a

> I do however think that it's important to note that opportunistic STARTTLS is vulnerable to downgrade attacks by mitm

See SMTP MTA Strict Transport Security (MTA-STS):

* https://tools.ietf.org/html/rfc8461

And STARTTLS Everywhere:

* https://starttls-everywhere.org/