Comment by mr_mitm

It does offer TLS. The certificate just doesn't contain `www.catb.org` in its SAN. (But dozens of other host names.)