read more
http://feedproxy.google.com/~r/Securityweek/~3/OucjmibxpRI/majority-encrypted-email-clients-vulnerable-signature-spoofing