[Dovecot] Selectively allow non-SSL connections based on userdb

Howdy Folks,

I am considering transitioning our mail service over to SSL-only. As a transition mechanism, it would make sense to force all new accounts to use SSL, but still allow old accounts to go unencrypted until some transition date passes.

I have done some extensive searching but could not figure a mechanism through which I could specify a setting for this in userdb or similar. Does anyone have any ideas that doesn’t involve a post-login script?

Thanks,

Trent