@freddyb With hashes, wouldn't every update require two pushes (CDN, HTML)? Signatures would only require one (CDN), is that an option?