3 ms·
I wonder if it'd be possible to sign the JS a site serves you, so you know it's unchanged from when you originally got it?
by nhayden 12y ago
I wonder if it'd be possible to sign the JS a site serves you, so you know it's unchanged from when you originally got it?
- nunyabuizness 12y agoYou can sign it, but then your clients would have to install an extension to verify it.
- handsomeransoms 12y agoI think it's theoretically possible to use Service Workers to do this, giving you a TOFU trust guarantee, although I think there are some issues due to the spec-mandated auto-updating of Service Workers every 24 hours.