> Everybody needs to start diffing javascript served by them. It would be nice if there were something like Perspectives[0] or Binary Transparency / Sigstore[1

> Everybody needs to start diffing javascript served by them. It would be nice if there were something like Perspectives[0] or Binary Transparency / Sigstore[1] to raise the alarm when something like this happened, but the threat would also be avoided if ProtonMail was available as a SecureBookmark[2]. [0] https://www.techrepublic.com/blog/data-center/ssl-tls-certificates-perspectives-helps-authentication/ https://www.techrepublic.com/blog/data-center/ssl-tls-certif... [1] https://security.googleblog.com/2021/03/introducing-sigstore-easy-code-signing.html https://security.googleblog.com/2021/03/introducing-sigstore... [2] https://coins.github.io/secure-bookmark/ https://coins.github.io/secure-bookmark/