Another place to favor security over encryption
More protocol vs. pattern clarifications
Capabilities determination is per-protocol

... and should be covered in each protocol's spec.  DANE is nice, though.