Client now sends public key
Source verification