If you want to ensure the bits that were sent from the server to your browser they must be signed in some method.