I just verified that this is still occurring for reportbugs.debian.org port 443 (certificate not valid for this hostname), and ports 587 and 25 using STARTTLS (self-signed certificate). I've reassigned the bug since it's not really an issue with the reportbug package itself.
-- Brian Minton brian at minton dot name https://brian.minton.name Live long, and prosper longer! OpenPGP fingerprint = 8213 71DD 4665 CF4F AE20 2206 0424 DC19 B678 A1A9
signature.asc
Description: PGP signature