Hmm...since jabber.domain.org and domain.org have the same IP address, I guess lsof -i isn't a good way to determine what telepathy-gabble/empathy thinks it's connecting to. Durr...I should have known better than that. New hunch: Telepathy is using the custom server setting (or SRV record) to determine what to connect to, but it is not updating the TLS verifier accordingly.
Hmm...since jabber.domain.org and domain.org have the same IP address, I guess lsof -i isn't a good way to determine what telepathy- gabble/ empathy thinks it's connecting to. Durr...I should have known better than that. New hunch: Telepathy is using the custom server setting (or SRV record) to determine what to connect to, but it is not updating the TLS verifier accordingly.