the faq says: tls: oversized record received with length 20291 (and sometimes EOF) means that the service uses STARTLS and I still need to implement it.