If you're looking at trusted-application security models, you've probably considered TOFU and what I call BEEF (Beware Each and Every Fetch). The standard crit

If you're looking at trusted-application security models, you've probably considered TOFU and what I call BEEF (Beware Each and Every Fetch). The standard criticism of web-based apps is that you have no guarantee that the code you receive will be the same as that which you received on your previous visit. (This ignores problems with self-updating desktop apps, but let's pretend users make informed decisions about every new version published). Fortunately there is, at least in principal, a way of achieving TOFU for web apps. It relies on the bookmarklet/SRI trick[0], which lets the user store the hash of a script which bootloads the rest of the application. The major downside with this is that the browser's address bar shows a Data URI rather than the domain of your app. That limitation wouldn't exist, though, if browsers supported Hashlinks[1]. [0] https://news.ycombinator.com/item?id=17776456 https://news.ycombinator.com/item?id=17776456 [1] https://datatracker.ietf.org/doc/html/draft-sporny-hashlink-07 https://datatracker.ietf.org/doc/html/draft-sporny-hashlink-...