--- a/plugins/mod_s2s.lua	Tue Aug 02 16:08:43 2022 +0200
+++ b/plugins/mod_s2s.lua	Tue Aug 02 19:26:26 2022 +0200
@@ -429,7 +429,8 @@
 	session.had_stream = true; -- Had a stream opened at least once
 
 	-- TODO: Rename session.secure to session.encrypted
-	if session.secure == false then
+	if session.secure == false then -- Set by mod_tls during STARTTLS handshake
+		session.starttls = "completed";
 		session_secure(session);
 	end
 
@@ -750,6 +751,7 @@
 	local w = conn.write;
 
 	if conn:ssl() then
+		-- Direct TLS was used
 		session_secure(session);
 	end