As for SMTP Server forwarding to other SMTP servers, the message will not signed until it reaches the receipt's domain SMTP server. Each of the SMTP would authenticate themselves using a series of cryptography challenges, to if the SMTP really holds the corresponding private key.