4 ms·
Could browsers that cache resources cross reference the integrity check and load their cached version even if the domain is different as a speed optimisation?
by TomGullen 6y ago
Could browsers that cache resources cross reference the integrity check and load their cached version even if the domain is different as a speed optimisation?
- mcovey 6y agoI think they could, and it would be a good idea too. Browsers could also possibly ignore server-sent cache directives for scripts with SRI hashes, or at least consider them immutable by default, since there is virtually no possibility of any script with the same hash referring to a different file.
- CodesInChaos 6y agoThat opens up fingerprinting attacks browsers want to avoid. They're actually moving in the opposite direction, and consider disabling caching across top level origins.