Scripts are signed using Netscape's Page Signer tool (a Perl script) |
Scripts may be served from a secure (SSL) server, in which case they're treated as if signed with the public key of that server |
Users retain the right to deny the privileges requested by the signed script |