When I send credentials using the login method of the python SMTP library, do they go off the wire encrypted or as plaintext?
They will only be encrypted if you use SMTP with TLS or SSL.
sending an email using python SMTP library credentials security