> STARTTLS is massively used to secure internal comms as a (cough) "best practice" Well, I've seen it be a "best practice", because of some legacy component t

> STARTTLS is massively used to secure internal comms as a (cough) "best practice" Well, I've seen it be a "best practice", because of some legacy component that only supported ldap with starttls or plaintext. It wasn't so much "starttls is great" as "starttls is the best we can do right now".