Prove SMTP authentication on every connection

Treat SMTP authentication as connection state, require fresh proof after every handshake, and fail closed when a server tries to downgrade the protocol.

October 30, 2026 · 4 min · Russell