4 ms·
Might subresource integrity be what you are looking for? Not sure if you meant that, or if you are proposing such a system (which is a good idea!) without reali
by lucb1e 6y ago
Might subresource integrity be what you are looking for? Not sure if you meant that, or if you are proposing such a system (which is a good idea!) without realizing that this already exists:
https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity https://developer.mozilla.org/en-US/docs/Web/Security/Subres...
- XCSme 6y agoHe is proposing to use the integrity hash for caching purposes, not for security purposes. This has been discussed before and it is unlikely it will be implemented as it is almost impossible to eliminate finger-printing and privacy issues if this cache is implemented plus it might lead to security problems: https://github.com/w3c/webappsec-subresource-integrity/issues/22#issuecomment-637490030 https://github.com/w3c/webappsec-subresource-integrity/issue...
- lucb1e 6y ago> for caching purposes, not for security purposes Whether it's for caching or security purposes, a hash of the contents is a hash of the contents. The link you shared is about tracking whether a given document is already cached. That's the same problem as with normal caching. At least the top N libraries could be downloaded with a browser update and be equal for everyone.
- deleted 6y ago[deleted]