from a valid Certificate Authority, and moreover, that signature can be
validated by a second entity (i.e., a certificate validation service).
u Open Design—Security should not depend on security-throughobscurity, i.e., the ignorance of potential attackers, but rather on
assurance of dependability and/or the possession by users of specific,