Viktor Dukhovni: > With "may" there is no protection against active attacks, so no > CPU cycles are wasted going through the motions of certificate > checks whose results are ignored.
We may want to provide an option to make the motions anyway. Even
if the outcome has no direct effect on whether mail will be delivered,
it can be useful for change-detection purposes.
Wietse
