3 ms·
Subresource Integrity works on both HTTP and HTTPS. This seems like exactly the thing that they were talking about when they started depreciating http [0]. Doe
by ikeboy 11y ago
Subresource Integrity works on both HTTP and HTTPS.
This seems like exactly the thing that they were talking about when they started depreciating http [0]. Does this mean they've changed their mind?
[0] https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/ https://blog.mozilla.org/security/2015/04/30/deprecating-non...
- dspillett 11y agoNo, it just means that this method works for both HTTPS and plain HTTP - they are not stating an opinion of either protocol here. If you are using HTTP then this would protect you from one class of problem, but it leaves all the other potential problems open if they are relevant to your content.