POP credentials transmitted unencrypted

Apparently using POP unencrypted is another big no-no.
3.2.6. POP credentials transmitted unencrypted (pop-plaintext-auth)
Description:
The server supports authentication methods where credentials are sent in
plaintext over unencrypted channels. If an attacker can
intercept traffic between a client and this server, the credentials would
be exposed.
Affected Nodes: Additional Information:
xxx.xxx.xxx.xxx:110 Running POP serviceConfiguration item
pop.plaintext.authentication set to 'true'
matched


Rob Berendt