The problem with subresource integrity is that it ties you to one version of the code. That's fine for something like jQuery, but doesn't work in this case where you expect the code to change relatively frequently.
Re:PageFair: Economist hacked
by johncolanduoni on Friday November 06, 2015 @07:26PM
(#10522968)
So then why was your response to
> so there isn't much owning your own infrastructure can do for that.
> Sure it is, ...
?
My recommendation was already stated: if you use any external CDNs, make sure you don't fuck up those accounts. 2FA is one thing to safeguard against account compromise. Subresource integrity would be the next step, it's coming soon or is already here.
http://caniuse.com/#feat=subresource-integrity