I've just spent a few hours brain-haemorrhaging over why my new Postfix server wasn't allowing me to enter "RCPT TO:" over a STARTTLS connection. Instead it would renegotiate the TLS.
Eventually I found an e-mail by Wietse Venema saying:
Victor Duchovni: > On Mon, Jan 22, 2007 at 04:31:12PM -0500, Wietse Venema wrote: > > RCPT TO:<postmaster> > > RENEGOTIATING > > You got bit by the "s_client" "R" feature... try "rcpt to:" lower case, > then it hangs up. What utter brain damage, a non-transparent SSL client program.
Read this and be warned -- we are all stupid, in the eyes of the truly mad