Not all email services encrypt messages by default. Gmail fortunately does, but organizations still need to enable S/MIME manually for additional protection against threats like man-in-the-middle attacks. What’s more, S/MIME won’t work unless both parties support it.