date posted 18th January 2006 13:36 It needs to be on the server to encrypt server-generated e-mails containing sensitive data.