As with most cryptography on a network, its pretty difficult to build black-box systems that test for correctness. Its much easier to find this kind of problem through code review.