Viktor Dukhovni:
So yes, you can't have wrapper mode for just the fallback relay.
Hello,
I had a similar problem some time ago and also found what you sumarize now.
I'm still using 587+STARTTLS but that "break" our `more general rule`
to prefer implicit TLS over STARTTLS
So, at least I would now announce that it would be nice to have
something like this:
master.cf
smtp unix - - n - - smtp
-o smtp_fallback_relay=[relayhost.example]:465
# not yet existing option :-)
-o smtp_fallback_relay_wrappermode=on
Andreas