yahoo, i think, had something similar a year or 2 ago and at least thunderbird caught up with it quickly and works fine since. let's hope that this new "feature" will give them enough assurances that it is really me when I accidentally enter a vpn with email client on and all alarms ring in their HQ.