sknebel[kevinmarks] regarding the packaging proposal, since they want to prove that the document is from the source domain, without the browser contacting it, a signature is what they need IMHO. Also adding non-repudiation to HTTPS along the way if I see this correctly (interesting for archives)
