After finally getting pop-before-smtp to work for pop and imap clients, I find that the major ISP in the area is starting to block port 25 outbound from their dynamic IPs, so the feature is currently useless for a number of people.
Isn't this pretty much exactly what you need?
http://www.rickk.com/sslwrap/
[NOTE: I have not used this software]
BTW - Kudos to the ISP for blocking port 25 on their dynamic IP's! This is a major source of spam (from the zombie army)!
John
