Ah, OK. It was some time ago that I last had to do this -- eventually I talked the mail admins into turning on proper IMAP+SSL.

Peter