You can do both or even no TLS if you want. It's easy to choose so on the domain preferences (it's only per domain, AFAIK)