[robmccoll]

Even better: XML signatures, which are very easy to get wrong in both signing and verification.

[bitexploder]

Yeah, it is a gross morass of pain and cruft and unclear implementation for devs.