If the encryption at rest is done by the server, that defeats the point.

Also, how does the user receiving an encrypted email access it? Do they have to enter a password? How is the password transmitted to them?