3 ms·

I’m confused here, why not just serve your stuff over HTTPS with SRI? Who is the bad actor, the local user?