Re: I was able to create a digital signature for someone else and use it. How is that protected??

A digital signature can not be used to verify someone's identity. I can create a signature using anyone's name and email address. In fact, those things are irrelevant to the signature. The only thing that matters is the key used to create it, and therefore to verify it.