<?xml version="1.0" encoding="utf-8" ?>
<EmailAutoConfig>
 <Identity>
  <Name>Joe User</Name>
  <Organization>Example.org</Organization>
  <Signature location="http://www-internal.example.org/new_advertising_signature_every_day.txt" />
<!-- may also be <Signature location="inline">signature text here</Signature> -->
 </Identity>
 <IncomingTransports>
  <IncomingTransport>
   <TransportType>POP3</TransportType>
   <ServerName>pop.example.org</ServerName>
   <ServerPort>110</ServerPort><!-- if not given the default port of that service -->
   <TransportEncryption>
    <X509>
     <UseSTARTTLS>required</UseSTARTTLS><!-- forces client to always use STARTTLS first here. Other value: optional. If not present at all server does not support STARTTLS e.g. for POPS on port 995 -->
     <Authority>http://www.cacert.org/certs/root.crt</Authority> <!-- Yes, the client will automatically fetch and import this once you confirm. No more searching where to put root certs -->
    </X509>
   </TransportEncryption>
   <SupportedOptions>
    <!-- this helps to get things like POP Pipelining right-->
   </SupportedOptions>
   <Authentication>
    <AuthTypes>
     <AuthType>CRAM-MD5</AuthType><!-- preferred one first, then in descending order. First one supported both by client and server is used. -->
     <AuthType>LOGIN</AuthType>
     <AuthType>PLAIN</AuthType>
    </AuthTypes>
    <UseCredentials>defaultCredentials</UseCredentials><!-- any number of them as the server may support different ways to authenticate. Client offers the supported ones to the user and let's him choose. Preferred ones first. -->
   </Authentication>
  </IncomingTransport>
  <IncomingTransport>
   <TransportType>IMAP4</TransportType>
   <ServerName>imap.example.org</ServerName>
   <!-- like above, just for IMAP. I omit the fields here for simplicity. -->
  </IncomingTransport>
 </IncomingTransports>
 <OutgoingTransports>
  <OutgoingTransport>
   <TransportType>SMTPS</TransportType><!-- does anyone really use this these days? -->
   <ServerName>outgoing.example.com</ServerName>
   <ServerPort>465</ServerPort>
   <TransportEncryption>
    <X509>
     <X509Certificate location="http://www.example.org/smtps_cert.crt" /><!-- this server uses a self-signed certificate that needs to be imported -->
    </X509>
   </TransportEncryption>
  </OutgoingTransport>
 </OutgoingTransports>
 <Credentials id="defaultCredentials" type="password"><!-- as used above -->
  <Username>joe.user@office.example.org</Username>
  <Password type="ask" /> <!-- not supplied here, user must enter it -->
 </Credentials>
 <!-- more Credentials may follow here e.g. if you optionally support authentification by token, X.509 or whatever -->
</EmailAutoConfig>
