🔒 Fix STARTTLS stripping vulnerability (backports #664)#665

Merged

nevans merged 3 commits into

v0.5-stablefrom

backport/v0.5/STARTTLS-stripping

Apr 23, 2026

Commits on Apr 23, 2026

🍒 pick 46636cae8: ❌🔒 Add failing test for STARTTLS stripping [backport #664]
nevans
committed
🍒 pick 62eea6ffe: 🔒🥅 Ensure STARTTLS tagged response was handled [backport #664]
nevans
committed
🍒 pick 24d5c773d: 🔒🥅 Handle tagged "OK" to incomplete command [backport #664]
nevans
committed