Ok, confirmed: CRAM-MD5 does not work on my system - it immediately returns "LOGIN failed" without ever attempting a login over the net.

DIGEST-MD5 works as expected, so I can temporarily and with a more theoretical than practical security impact work around it, as far as my own server is concerned, by disabling CRAM - but I doubt that my employer and T-Online will be as forthcoming.

Sevo