3 ms·
Once AMP stabilizes, I'm hoping Google will encourage the use SRI to ensure that the content is what a site expects: https://developer.mozilla.org/en-US/docs/We
by callahad 10y ago
Once AMP stabilizes, I'm hoping Google will encourage the use SRI to ensure that the content is what a site expects: https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity https://developer.mozilla.org/en-US/docs/Web/Security/Subres...
- mschoebel 10y agoStill unacceptable as it would still cause my users to expose their IP address to someone else's server.
- retox 10y agoUnfortunately the ubiquity of FB and G+ buttons, Google analytics and CDN use has raised a generation of web developers who don't see that as a problem.
- kbwt 10y agoCertificate Transparency will reveal the domains you connect to over TLS to a Google server anyway. Assuming you don't already use Google's DNS, that is.
- bryanlarsen 10y agoGoogle could and should change their requirement to be that the integrity value for the script must be in their approved list rather than requiring their path.