Amazon's own SES documentation tells developers the service "requires TLS 1.2 and recommends TLS 1.3." In testing, SES delivered over whatever the receiving server offered, including Transport Layer ...