Forgive my lack of know-how, but does this theoretically mean I could download this _signed package_ to my computer along with the signature and use it later to prove that the information was provided by the source according to the signature?
Once I can create webpackages and deliver them to clients a lot of thing I want to do become hugely easier and nicer.
I know it's not exactly easy to follow but the only implementation repo I can think of to follow right now is the Chromium repo.
I also had a look in the blog and the "progressive web apps" might be the right thing to look at. There's probably something subtle that's different but I think I can use these to solve the actual problem I have.
https://developers.google.com/web/updates/2019/03/nic73?hl=h...
edit - damn, I don't think this is right at all. Frustrating as it seems pretty perfect but I have to serve from my own domain for 30s before a user can install it :( I just want a single file way of delivering web content! It seems like all the features are basically there, just with restrictions to focus on different use cases.