OOXML signatures are rendered pretty much useless due to 3 flaws in specification and 2 flaws in implementation.

“The vulnerabilities have been acknowledged by Microsoft. However, Microsoft has decided that the vulnerabilities do not require immediate attention.”