Secondly, it should be computationally infeasible to generate a valid signature for a party who does not possess the private key.
It also should be almost impossible to generate a working signature for anyone without the private key.