Simple nonce-signing scheme for detecting host changes