Exactly what I was trying to say but likely did it wrong. I rather have a secure modular system than a single protocol that does everything. We simply just can

Exactly what I was trying to say but likely did it wrong. I rather have a secure modular system than a single protocol that does everything. We simply just can't leave it as JMAP+SSL because once SSL cannot be trusted, it should be easier to replace it with a better solution or an updated SSL protocol. I don't think it is reasonable to include this within JMAP and force all services to update jMAP overnight because the internal crypto library had a hole.