(Assuming this is not already solved in a way I do not know...) Extending your example, would it be possible to have: <a href="https://example.com/data

(Assuming this is not already solved in a way I do not know...) Extending your example, would it be possible to have: <a href="https://example.com/data.bin" integrity="sha384-oqVuAfXRKap7fdgcCY5uykM6+R9GqQ8K/uxy9rx7HNQlGYl1kPzQho1wx4JwY8wC" >link</a> I think this would be useful to have the browser check the integrity of the linked content, rather than asking the user to do it. You could have the hashsum being performed as the file is being downloaded. I think we would then want to the browser to indicate that the link actually has this integrity check, although it would be difficult to do in a way that cannot be easily spoofed. You could have something happen on hover over, but this won't work for touch devices.