There are some options as well as prerequisites necessary here if I recall things correctly (using ID file or S/MIME) Many years since I ran into this. But to start with at least you will need to exchange certificates with each other by sending a - signed email - and save the contact in your address book (importing the certificate). Other than that I just cant remember...