I can't get how it works ? it's a server-to-server signed request? There's already TLS between them, what's the plus?
Can be signed also client-server requests?
It means can work as certified mail, who can prove the message got inside the inbox of one user and got out from the outbox of another?
What if key-pair is lost/stolen? ?