@Juhaz: looking into this, I seem to remember that was more or less intentional. In what circumstances would it be reasonable to have XMPPClient not use TLS?

@ralphm we are running a bunch of microservices that are perhaps semantically more like components than "normal" clients but for one reason or another didn't quite fit that mold either. They're running in same internal network as the XMPP server itself so TLS is necessary or helpful.

I understand that this is probably not a very common use-case.

I guess the use-case itself is not that uncommon. However, for a while now, best practice is to have interconnecting (micro)services use transport encryption. Usually for regulatory compliance and privacy reasons. So I assumed nobody really did that anymore.