Secondly, it should be computationally infeasible to generate a valid signature for a party who does not possess the private key.
It should be impossible to create a valid signature for a party who does not have the private key.