SMTP Service Extension for Secure SMTP over Transport Layer Security

RFC 3207 defines the STARTTLS SMTP service extension, which allows an SMTP client and server to upgrade a plaintext connection to TLS encryption in-band. The client issues STARTTLS after the initial EHLO, and the server responds with a 220 code before the TLS handshake begins.