News for hackers. Stuff that matters.

A comment on The Web We Want. Parent comment

Re:The Web We Want by Spivak on Friday June 10, 2016 @11:39AM (#11877134)
Compromise and make sure it's served 1st party?
[ Parent | on HN ]
Re:The Web We Want by sp332 on Friday June 10, 2016 @11:47AM (#11877196)
Caches are nice though. Compromise and make sure it's checked against a hash provided by the first party?
[ Parent | on HN ]
Re:The Web We Want by Spivak on Friday June 10, 2016 @12:15PM (#11877449)
As long as you use subresource integrity we have a deal! I know it's currently experimental but having native browser support is much more palatable than using JS to check the hash.
[ Parent | on HN ]
Re:The Web We Want by hueving on Friday June 10, 2016 @12:36PM (#11877623)
Then ensure that it can't communicate with the domain it's loaded from.
[ Parent | on HN ]