Fetchmail fails to deliver mail locally due to enforced STARTTLS

I have setup a local mail server using postfix and dovecot. I now want fetchmail to get my mails from another server and deliver them locally. I am getting errors, however, since fetchmail does not use STARTTLS when connecting via SMTP to the local postfix: reading message 852 of 853 (18519 octets) (log message incomplete) SMTP> MAIL FROM: SIZE=18519 SMTP RSET According to this previous question this is because fetchmail does not support STARTTLS when talking to an SMTP server and states that it > is normally not a problem, as it usually delivers emails locally. I therefore conclude that my configuration is flawed in some way. I want connections to postfix to be secure when a MUA delivers mail but obviously I cannot enforce it if I want to use fetchmail. Is it the way to go to relax the security constraints in postfix's master.cf for SMTP and only enforce STARTTLS for SUBMISSION?