http://chiralsoftware.com/linux-system-administration/secure-relaying-postfix-sasl-tls-dovecot.seam as both of them are quite capable of providing security in terms of authentication but dovecot is much simpler to configure and is now being used widely. The link mentioned would give you more insight.
Thanks & Regards,
Alok Thaker