Subresource integrity isn't supposed to be a replacement for HTTPS. SRI is useful when you're relying on content from another domain, like loading jquery from a

Subresource integrity isn't supposed to be a replacement for HTTPS. SRI is useful when you're relying on content from another domain, like loading jquery from a CDN that you're not sure is trustworthy. Just because the CDN may support HTTPS doesn't mean that you trust the CDN to give an unbackdoored version of jquery. SRI is used to require that the copy of jquery they give matches a specific hash. HTTPS can still be useful with SRI for privacy. SRI doesn't protect or verify the downloads of html pages generally.