3 ms·
I can't believe I'm defending save-an-HTML-file-to-disk as a model, but, in their defense: their did say _download_, so you can't mess with the SRI hash. (I do
by lvh 8y ago
I can't believe I'm defending save-an-HTML-file-to-disk as a model, but, in their defense: their did say _download_, so you can't mess with the SRI hash.
(I don't think this is a good idea, I'm just saying technically your criticism doesn't apply, though you are correct in how SRI works. I'm so sorry :()
- LukeShu 8y agoI mean, tptacek's claim was that "your users will have to install something to make a PAKE secure." If your interpretation of the_clarence's comment is correct, then he didn't refute tptacek's claim, he just suggested a rather silly value of something; something="an HTML file".
- lvh 8y agoSure, his rebuttal wasn’t either :)
- the_clarence 8y agoSri was just an example of how to make it light. Hell you don't need to use sri. Download the whole page and keep using it. But again that's like downloading native apps.