This is a quick recap of why I'm sad about SMTP encryption. It explains how TLS certificate verification in SMTP is useless even if you force it.
more here...........https://blog.filippo.io/the-sad-state-of-smtp-encryption/
more here...........https://blog.filippo.io/the-sad-state-of-smtp-encryption/