From Overview of JavaScript II -- From Cookies to Dynamical HTML CPS616 Technologies of the Information Age -- Spring Semester 99. byGeoffrey C. Fox (Tom Scavo)
Signed objects are packaged in a JAR (Java Archive) file, a sort of "digital envelope" based on the ZIP archive format
Using signtool, one associates digital signatures with the files in a JAR, which:
confirm the identity of the entity whose digital signature is associated with the JAR
check whether the files have been tampered with since being signed