8 ms·
By that logic the extension from the very same vendor is automatically compromised, too. If a website is compromised, no extension will fix this. Only a rollb
by cookiengineer 3y ago
By that logic the extension from the very same vendor is automatically compromised, too.
If a website is compromised, no extension will fix this.
Only a rollback to a specific known-to-be-legit hash in IPFS.
And meta won't embrace IPFS, ever.
- dboreham 3y agoThe idea is you install the extension ahead of time when you do trust the source.
- cookiengineer 3y agoWhat is the difference to resource integrity and certificate pinning which is already implemented among every single Browser via the HSTS policies? Also, do you really think meta's products will have static assets for eternity from the point of installing an extension? Absurdly unlikely.