security Written by the Hub
TLS requirement for this message
How hard to insist on encryption for this message: optional, opportunistic, required or verified.
In detail
Per-message encryption policy, which is the granularity that actually matches reality: a password reset can reasonably demand a verified connection and fail otherwise, while a newsletter to the same domain should not.