What form of SMTP authentication is best supported in common clients these days?

I mean, if you want to authenticate users who will be using either Mac's or 
Windows machines, and who have a low level of tech literacy, what's the best 
setup on the server to avoid people using address spoofing and using your 
server?

---------------------------------------------------
This mail sent through tarcanfel's horde/imp system