.IR mechanism ]
.RB [ \-authservice
.IR service ]
+.RB [ \-tls ]
.RB [ \-initialtls ]
.RB [ \-notls ]
.RB [ \-certverify " | " \-nocertverify ]
Encrypted traffic is labelled with `(encrypted)' and `(decrypted)'
when viewing the POP transaction with the
.B \-snoop
-switch; see the
-.B post
-man page description of
+switch; see
+.IR post (8)'s
+description of
.B \-snoop
for its other features.
.PP
If
.B nmh
has been compiled with TLS support, the
+.B \-tls
+and
+.B \-initialtls
+switches will require the negotiation of TLS when connecting
+to the remote POP server. The
+.B \-tls
+switch will direct
+.B inc
+to negotiate TLS as part of the normal POP protocol using
+the STLS command. The
.B \-initialtls
-switch will require the negotiation of TLS when connecting
-to the remote POP server.
+switch will direct
.B inc
-will negotiate TLS immediately after the connection has taken place,
+to negotiate TLS immediately after the connection has taken place,
before any POP commands are sent or received. Data encrypted by TLS is
-labeled `(tls-encrypted)' and `(tls-decrypted)` when viewing the POP
+labeled `(tls-encrypted)' and `(tls-decrypted)' when viewing the POP
transaction with the
.B \-snoop
switch. The