Organizational Email Footer in O365, but with S/MIME Certificates

Question

My organization uses S/MIME certificates to digitally sign and encrypt emails. We would like to add a disclaimer at the bottom of our emails, which can be done via the mail flow settings in Office 365.

However, if the message is edited by the server after it has been signed by the sender, the certificate will show as invalid.

Is there a way to add an organizational email footer without affecting S/MIME functionality? Or is the only solution to add the disclaimer to to the client's signature?

Answer 1

Short answer: No, if your message is S/MIME signed you cannot add a footer without invalidating the signature.

Long answer: While an added footer would invalidate the message, it is possible to work around this in a few ways.

• Fallback Rules to encapsulate the signed message as an attachment with a footer. I'm not sure this is smart enough to understand the footer invalidates S/MIME signatures and not encryption. You'd have to experiment.

• OME deliver encrypted messages from a middle tier and skip S/MIME (significant change to mail flow, compatiblity, and use).

• Use PGP instead of S/MIME, which allows you to use PGP inline. However, it's not supported natively in Office 365, so you'd have to manage PGP extensions in browser and on Outlook clients.

• Third Party encryption or encapsulation equivalents outside of Office 365.

Edit: There is some dispute over PGP Inline and whether it is a sound security process or harmful.