Comment on One of the Most Alarming Internet Proposals I've SeenparentComments−mnot12yPrecisely this is actively being discussed in the W3C WebAppSec WG: http://w3c.github.io/webappsec/specs/subresourceintegrity/The security folks I talk to are... nervous... about this use of subresource integrity, however.−gojomo12yCan you say any more about what makes them nervous? (What do they think will go wrong?)−mnot12yEarly to say... it's their job to be nervous about new things.
Comments
Precisely this is actively being discussed in the W3C WebAppSec WG: http://w3c.github.io/webappsec/specs/subresourceintegrity/
The security folks I talk to are... nervous... about this use of subresource integrity, however.
Can you say any more about what makes them nervous? (What do they think will go wrong?)
Early to say... it's their job to be nervous about new things.