1. A method, comprising: receiving, at a client-side web browser, a minimal bootstrap payload from an application server; storing, by a client-side processor, the minimal bootstrap payload in a client-side local cache, wherein the locally cached minimal bootstrap payload is executed by the client-side processor before executing an application from the application server; the minimal bootstrap payload includes at least one public key and at least one Uniform Resource Location (URL) address of an application code payload; the client-side processor executes the minimal bootstrap payload, which comprises: receiving, at a client-side web browser, the application code payload from the URL specified by the minimal bootstrap payload, wherein the received application code payload includes a cryptographic signature using a private key associated with the public key specified by the minimal bootstrap payload; verifying, by a client-side processor, the received application code payload cryptographic signature using the locally stored public key; executing, by a client-side processor, the received application code payload after the received application payload has been successfully verified.