> Import defaults to unencrypted, at least for me. Import and srv > *should* default to TLS but it's not implemented. SSL is implemented > for import but it's not the default.
you can change the default. i'm sure there was a performance reason to make it not the default. (think of the import hidden in C.) it's probablly not a valid reason anymore. in fact, it would make sense to me to think about encrypting everything. say at the level of macsec. - erik
