3 ms·
Browsers can check "subresource integrity" to guard against hacks of third-party services. https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_In
by mdavidn 6y ago
Browsers can check "subresource integrity" to guard against hacks of third-party services.
https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity https://developer.mozilla.org/en-US/docs/Web/Security/Subres...
- nunez 6y agoYeah but you, the developer, need to provide the hash of the script being downloaded, work that’s easy to miss.
- samus 6y agoIn case the hash is provided, caching across websites could be turned on again, to avoid the possibility of it being used as a supercookie. The website would have to know the hash of the supercookie before loading the resource. Except if a candidate set of possible users can reasonably be downloaded to the client, maybe sorted by time of last access and proximity to the geo location of the IP address of the last access...
- namibj 6y agoYes. Pretty much.