News for hackers. Stuff that matters.
Re:API responses should be signed by cprecioso on Monday January 20, 2020 @03:38AM (#22097370)
Reposting the comment as top level, as I haven't seen it mentioned anywhere.

Google has developed Signed HTTP Exchanges https://developers.google.com/web/updates/2018/11/signed-exc... that can then be bundled https://web.dev/web-bundles/ .

Its main motivation is the rehosting of AMP pages while verifying that the cache hasn't tampered with them; but it could be extended to sign and bundle API calls for redistribution if needed.

There are no comments on this comment yet.