I’d really like to see something like https://engineering.fb.com/2022/03/10/security/code-verify/ https://engineering.fb.com/2022/03/10/security/code-verify/ be

I’d really like to see something like https://engineering.fb.com/2022/03/10/security/code-verify/ https://engineering.fb.com/2022/03/10/security/code-verify/ become a more standard part of browsers. i.e. a standard way to go from sub-resource integrity to “full integrity”. Having it as an extension just moves the weak point to the extension update mechanism. Of course apps can just distribute themselves as an extension which is probably the best compromise right now and something most web based password managers for example already offer.