This seems like it would be a cool browser standard. The browser could check that the specified SRI hash matches one published by some other entity, and then in

This seems like it would be a cool browser standard. The browser could check that the specified SRI hash matches one published by some other entity, and then include extra information in the ‘lock’ icon or dialog, that goes further than TLS. Usually, when I have an idea for a standard, it turns out one exists, so maybe I’ll do some digging…