> The above two settings are sufficient to require encryption on every > connection. Note these settings are not appropriate for an > internet-facing server.
I don't want to send passwords in clear that's what I'm trying to accomplish. I think that I'm mixing SMTP AUTH with SMTP. What should I tweak to prevent unencrypted authentication?