That&#x27;s fine. They can deny it. At least you won&#x27;t be MITM. I&#x27;d rather have no service than compromised service.<p>Look at Fastmail. They don&#x27;t even offer STARTTLS. Why? Because of downgrade attacks!<p><pre><code>    SSL&#x2F;TLS Encryption	Enabled, but not STARTTLS
 </code></pre>
<a href="https:&#x2F;&#x2F;www.fastmail.com&#x2F;help&#x2F;technical&#x2F;servernamesandports.html" rel="nofollow">https:&#x2F;&#x2F;www.fastmail.com&#x2F;help&#x2F;technical&#x2F;servernamesandports....</a>