>The situation where A is sending to B something that's harmful to C cannot be dealt with by C's filtering and can only be addressed at a higher level in the system.
Huh? If C knows A's public key and the content is signed, why can't C filter A's content?
Huh? If C knows A's public key and the content is signed, why can't C filter A's content?