Yes it works on 2.3.4, and yes, you CAN install a custom recovery with a locked bootloader.[snip]
My phone at the moment is 2.3.4 and I would guess this exploit would work for it?
And I also guess you can't install clockworkmod without unlocking your bootloader?