Product Pitch: letsencrypt for s/mime, would solve soo many problems. Every mailing provider could acquire a certificate for you and automatically sign it without any user interaction.