In writing the spec for Salmon we soon discovered that what we really wanted was S/MIME signatures for the Web. In other words, given a message, let you sign it with a private key, and let receivers verify the signature using the corresponding public key. Signing and verifying are pretty well understood, but in practice canonicalizing data and signing is hard to get right. Making sure that the