I have the same problem. I currently use ssh to tunnel and port forward the standard non SSL ports for imap, pop3, and smtp. Then I set the mail app to use localhost. My ISP allows localhost access to imap, pop3, and smtp ports, so this solution works well.
I have considered stunnel, may try it in the future. I have been using it for other non Z apps and it works well.