Considering this example https://docs.nginx.com/nginx/admin-guide/security-controls/securing-tcp-traffic-upstream/
How would you stream plain unsecured pop3 traffic to a secure endpoint elsewhere ? (without the backend certificates)

ea.
stream {
listen 110;
proxy_ssl on;
proxy_pass site.com:995;
}

---
nginx for Windows http://nginx-win.ecsds.eu/