Try postfix-2.12-20140219 (from ftp.porcupine.org). The "fall back to plaintext" strategy is refined such that persistent breakage after the TLS handshake is now again reported as a "destination" problem, at least on the first pass over the MX hosts. Later, Postfix will retry plaintext after TLS failure.
Wietse
