3 ms·
There are some efforts to use extensions to allow signing/verification of web assets (assuming you trust the extension/browser), some via third parties: https:
by ranger_danger 2y ago
There are some efforts to use extensions to allow signing/verification of web assets (assuming you trust the extension/browser), some via third parties:
https://github.com/tasn/webext-signed-pages https://github.com/tasn/webext-signed-pages
https://github.com/jahed/webverify https://github.com/jahed/webverify
https://github.com/facebookincubator/meta-code-verify https://github.com/facebookincubator/meta-code-verify
There was another one posted here recently, but I'm unable to find it now.
- twiss 2y agoPossibly https://github.com/freedomofpress/webcat https://github.com/freedomofpress/webcat? (I also made one, a long time ago: https://github.com/twiss/hcs-checker-firefox https://github.com/twiss/hcs-checker-firefox.) There is also an effort to build this into browsers directly, which we (Proton) are involved with: https://github.com/twiss/source-code-transparency https://github.com/twiss/source-code-transparency (old initial proposal) https://github.com/beurdouche/explainers/blob/main/waict-explainer.md https://github.com/beurdouche/explainers/blob/main/waict-exp... (more recent proposal) https://github.com/beurdouche/w3c-waict/blob/main/waict.bs https://github.com/beurdouche/w3c-waict/blob/main/waict.bs (very early draft specification)
- captn3m0 2y agoProbably WEBCAT from the SecureDro team: https://securedrop.org/news/introducing-webcat-web-based-code-assurance-and-transparency/ https://securedrop.org/news/introducing-webcat-web-based-cod...
- ranger_danger 2y agoThat's the one! Thanks