Question about validation

[eGavr]

I am an issuer of some organization.

I've created a badges and sent it to an earner.

How can another people understand that the earner receives the badge exactly from my organization, but not from another bad person which uses the metadata in issuer.json of my organization to issue his own badges?
His badges will be valid too, but they will not be from my org.

[threeqube]

Feels like this might be related to this discussion: mozilla/openbadges-backpack#1003