HTTPS is often overkill because it encrypts everything, which isn't always necessary for websites/pages with non-personal data. Then it is sufficient enough to

HTTPS is often overkill because it encrypts everything, which isn't always necessary for websites/pages with non-personal data. Then it is sufficient enough to just sign it. Maybe the key could be distributed through DNS, like DKIM.