System and method of cryptographically signing web applications

A non-transitory computer readable medium, instructing an computing device to execute a method comprising:

• receiving, at a client-side web browser, a minimal bootstrap payload from an application server;
• storing, by a client-side processor, the minimal bootstrap payload in a client-side local cache, wherein
• the client-side local cache comprises a locally stored public key previously received by the application server and stored in the client-side local cache by the client-side processor
• the locally cached minimal bootstrap payload is executed by the client-side processor before executing an application from the application server;
• the minimal bootstrap payload includes at least one public key and at least one Uniform Resource Location (URL) address of an application code payload;
• the client-side processor executes the minimal bootstrap payload, wherein executing the minimal bootstrap payload comprises:
• receiving, at the client-side web browser, the application code payload from the URL specified by the minimal bootstrap payload, wherein the received application code payload includes a cryptographic signature using a private key associated with the at least one public key specified by the minimal bootstrap payload;
• verifying, by the client-side processor, the received application code payload cryptographic signature using the locally stored public key;
• executing, by a client-side processor, the received application code payload after the received application payload has been successfully verified.