This looks like the bug I reported upstream to <http://bugzilla.gnome.org/show_bug.cgi?id=339939>. It was fixed in 2.6.2. -- IMAP TLS with LOGIN authentication sends the login in cleartext https://launchpad.net/bugs/48850