The Outlook client supports S/MIME, and the Exchange 2003 version of OWA extends S/MIME support to OWA users.
Email messages are encrypted before they're submitted to the Exchange message store service.