When appropriate, check that decrypted file/text was encrypted with the expected key

[elimisteve]

That way the server can't use your public key to encrypt something malicious to you