Well, first thing first, postfix is a MTA, not POP3/IMAP server.
Config dovecot to listen IMAPS port and secure by SSL/TLS those connections.
Suggest:
http://wiki.dovecot.org/SSL
change files:
/etc/dovecot/dovecot.conf
/etc/dovecot/conf.d/20-imap.conf
enable imaps "protocol"
and config it, set correct certificates. You will need to generate those certificates.
You needn't subscribe it by a trusted certificate authority (no CA import).