The PLAIN SASL mechanism provides little protection over the use of plain-text passwords by combining the user name and password and obscuring them within a base64-encoded blob and should be avoided unless used in combination with an SSL or TLS connection.