4 ms·

Subresource integrity still requires you to trust the server sending the hashes.

• EGreg 10y ago
  Ok so publish the hashes on a blockchain and have the client verify them there
  • rudolf0 10y ago
    Not a bad idea, but this isn't a thing browsers currently do, and the average person can't do that with ease. Especially considering this web app is aimed at non-tech savvy individuals.
    • roblabla 10y ago
      Make the whole page hosted on IPFS, and make your DNS point to it. Then you just need to trust the DNS. So use namecoin.