Use of POP-3 or IMAP4

[dpanattoni]

I have a need to allow remote users to check their e-mail by configuring their Outlook clients to connect to the company Exchange 5.5 server. They don't want to use OWA.

My concern is that the authentication credentials are sent in clear text when using POP or IMAP. I would rather not require SSL for these protocols. Is there a method to only encrypt the authentication credentials?

Thanks in advance.

 

[zbnet]

VPN?

 

[dpanattoni]

I have a VPN available, but would like to not have to jump through the vpn hoops just so that a user can get e-mail. Plus, I have found that in some hotels, the ISP blocks the VPN ports.

 

[dpanattoni]

What about the Secured Password Authentication (SPA) option?

Does this not use a non-clear text method to authenticate the user?