[jodrellblank]

How are you to know I didn't sit at someone elses PC and send an email automatically signed as them?

[RK]

That usually requires your signing password, which, done securely, shouldn't stay in memory for more than a few minutes. Of course a lot of people probably just check the "remember indefinitely" box.