3 ms·

Precisely this is actively being discussed in the W3C WebAppSec WG: http://w3c.github.io/webappsec/specs/subresourceintegrity/ http://w3c.github.io/webappsec/

by mnot 13y ago

Precisely this is actively being discussed in the W3C WebAppSec WG: http://w3c.github.io/webappsec/specs/subresourceintegrity/ http://w3c.github.io/webappsec/specs/subresourceintegrity/ The security folks I talk to are... nervous... about this use of subresource integrity, however.

gojomo 13y ago
Can you say any more about what makes them nervous? (What do they think will go wrong?)
- mnot 13y ago
  Early to say... it's their job to be nervous about new things.