Digital Signatures are only good for specifying identity, not authenticity. Perhaps this fact should be explained in colloquial English for users.