This way, properly setup clients, managed by users local to your James server, can securely exchange confidential messages even if running on laptops or other PCs physically located outside the local network: no internal or external sniffer can "see the contents of such messages.