With proper security policies in place, creating a flawed key would also "not be as trivial as some people would imagine". The issue which you claimed is that o

With proper security policies in place, creating a flawed key would also "not be as trivial as some people would imagine". The issue which you claimed is that one can not determine whether or not the other party is following proper security policies - which is true no matter what.