alienfluid··on It's Time to Fix HTTPSDigital Signatures are only good for specifying identity, not authenticity. Perhaps this fact should be explained in colloquial English for users.