Signed Scripts (cont’d)
Scripts are signed using Netscape's Page Signer tool (a Perl script)
Scripts may be served from a secure (SSL) server, in which case they're treated as if signed with the public key of that server
Users retain the right to deny the privileges requested by the signed script