I&#x27;m happy about incrementally rolling this stuff out.  STARTTLS for now.  Surfacing that in the UI.  Then maybe DANE, and in parallel some form of downgrade notification, or pinning, or something.