[oss2020]

Real transport level security will be possible with MTA-STS (rfc8461). Use DNSSEC, enforce TLS, and verify server certificates. Also I haven't had much trouble with spam recently (spam filter works fine).

[tptacek]

The point of MTA-STS is not having to use DNSSEC, which nobody does anyways.