conceived for widespread usage in environments that lack any kind of security
infrastructure, they are increasingly replacing or augmenting digital signature
and cryptographic hashes as integrity mechanisms on software. The problem
of trustworthy download source identification (i.e., making sure the site from