[yencabulator]

Whatever Signed HTTP Exchange it can successfully claim. The whole point of this work is to separate origin from where you managed to download the bytes from.

Imagine CDNs that cannot forge content for your site.

[hinkley]

Okay, so for single source content I can either derive or assert an origin. Composition, not so much...