Caches are nice though. Compromise and make sure it's checked against a hash pro... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

sp332 on June 10, 2016 | parent | context | favorite | on: The Web We Want

Caches are nice though. Compromise and make sure it's checked against a hash provided by the first party?

Spivak on June 10, 2016 | [–]

As long as you use subresource integrity we have a deal! I know it's currently experimental but having native browser support is much more palatable than using JS to check the hash.

hueving on June 10, 2016 | [–]

Then ensure that it can't communicate with the domain it's loaded from.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact