Secondly, it should be computationally infeasible to generate a valid signature for a party who does not possess the private key.
Secondly, it should be impossible to make a good signature for a person who does not have the private key.