Speaking about the content, I would've appreciated more details, especially for the Mallory scenario. It all looks a little bit like handwaving now: “Suppose a signature happens anyway”, how exactly could that happen and what's needed for that? ”The server throws it away”, but why exactly?