How is this different from using SMTP+STARTTLS with a DHE (or other forward-secret) ciphersuite? In currently deployed systems, if you have that enabled, it doe

How is this different from using SMTP+STARTTLS with a DHE (or other forward-secret) ciphersuite? In currently deployed systems, if you have that enabled, it does exactly as you describe. The transfer over the internet is encrypted, but the receiving MTA decrypts the message and stores it as plaintext.