Agreed. I upgraded my Openfire 3.8.2 environment to 3.9.3 to try to solve this, without success.
The release notes for 3.9.3 say that this problem is solved, but it is not.
We initially followed the instructions in http://www.globility.co.uk/?p=414, including installing the modified openfire.jar that was supposed to fix the dialback problem. It worked, but given the settings specified was clearly going to result in unencrypted messaging (verified by captures on the network interface).
After the upgrade to 3.9.3 we went through all our testing steps again, trying every variation on Openfire's server-to-server security settings. The only settings that worked were those in the above-cited article that have TLS set to unavailable (xmpp.server.tls.enabled = false).
Not sure what to do at this point. Any suggestions would be welcome.