I would like to set up my NetBSD laptop's Postfix setup to do SASL-over-TLS 
authentication -- preferably via client-side certificates -- to a 
remote site (also running NetBSD+Postfix).  All of the how-to pages I 
can find concern setting up the server -- does anyone have their 
Postfix set up to do the client negotiation?  (Actually, guidance on 
how to do the server-side setup for NetBSD would be useful, too, since 
Postfix is part of the base system but SASL is in pkgsrc.)

		--Steve Bellovin, http://www.research.att.com/~smb