I‘m not sure either whether I understand those file sharing efforts. Where for example are the signed content hashes of the referenced resouces? Wouldn‘t we absolutely want to have this?