1 | Scripts are signed using Netscape's Page Signer tool (a Perl script) |
2 | Scripts may be served from a secure (SSL) server, in which case they're treated as if signed with the public key of that server |
3 | Users retain the right to deny the privileges requested by the signed script |