5 ms·

Interestingly there is such an extension: https://github.com/tasn/webext-signed-pages https://github.com/tasn/webext-signed-pages tl;dr version is one pins all

by Boulth 7y ago

Interestingly there is such an extension: https://github.com/tasn/webext-signed-pages https://github.com/tasn/webext-signed-pages tl;dr version is one pins all resources on the page with Subresource Integrity hashes and signs the page. The extension verifies the signature matches before rendering anything.

lvh 7y ago
Neat! I haven't audited it but a quick look through the README suggests the approach is sound.
- Forbo 7y ago
  This thread has been very informative and gives me a lot of reading to look into. Thank you so much!
- Boulth 7y ago
  Too bad there is nothing like that built into browsers directly. I guess not only security related webapps could take advantage of it.