Our program has to sign XML documents so that the recipient can be certain a specific user signed it, as they're considered legally binding. The documents are

Our program has to sign XML documents so that the recipient can be certain a specific user signed it, as they're considered legally binding. The documents are transmitted via a relaying party, as we don't have support for the protocol the recipient requires. Similar cases could pop up in JSON-land, I imagine.