Today I learned that LDAP has an optional STARTTLS mode: SANS ISC: SSL/TLS on port 389. Say what?
(I also wasn't aware of the nmap ssl-enum-ciphers script mentioned in that post.)
(I also wasn't aware of the nmap ssl-enum-ciphers script mentioned in that post.)