Use SSL or TLS by connecting to the standard port and invoking STARTTLS before authenticating.
This is the recommended method.