Re: Q: How can you tell when a web font technology gone mainstream?

Indeed. DSIG is only a clue to provenance, not intent.

> On Jan 14, 2019, at 5:33 AM, Jonathan Kew <jfkthame@gmail.com> wrote:
> 
> Suppose we required webfonts to have valid DSIG signatures, or something like that. What difference would it make here? None, afaict; the bad guy could just sign the font and proceed in exactly the same way. A signature does nothing to guarantee that the font resource isn't going to mislead the reader.