News for hackers. Stuff that matters.
Re:Optimizing HTTPS performance by geofft on Sunday January 31, 2016 @05:11PM (#11008349)
Worth noting: subresource integrity doesn't currently change the mixed-content algorithm at all. An HTTPS site can't load an HTTP + SRI script.

It's useful for increasing the status quo on HTTP pages, or for defense-in-depth on HTTPS pages, but it doesn't actually enable you to do anything you couldn't before.

There are no comments on this comment yet.