As of May 2015, JSON Web Signatures have left "draft" status and been officially endorsed as RFC 7515. This PR updates the link to point to the new RFC.
It also changes the contentType of statement signatures from application/octet-stream to application/jose, as recommended by the RFC (and the older draft, incidentally).
From PR #945, but tabled until 1.1: