News for hackers. Stuff that matters.

A comment on One of the Most Alarming Internet Proposals I've Seen. Parent comment

Re:One of the Most Alarming Internet Proposals I've Seen by StavrosK on Sunday February 23, 2014 @06:35PM (#7288235)
That's actually a very good idea... Browsers could load the jquery file in your cache by its hash, rather than its URL. No more having 100 copies of jquery.min.js in your cache just because they're from different URLs.
[ Parent | on HN ]
Re:One of the Most Alarming Internet Proposals I've Seen by mnot on Monday February 24, 2014 @12:49AM (#7289297)
Precisely this is actively being discussed in the W3C WebAppSec WG: http://w3c.github.io/webappsec/specs/subresourceintegrity/

The security folks I talk to are... nervous... about this use of subresource integrity, however.

[ Parent | on HN ]
Re:One of the Most Alarming Internet Proposals I've Seen by gojomo on Monday February 24, 2014 @02:15AM (#7289513)
Can you say any more about what makes them nervous? (What do they think will go wrong?)
[ Parent | on HN ]
Re:One of the Most Alarming Internet Proposals I've Seen by mnot on Tuesday February 25, 2014 @12:07AM (#7295750)
Early to say... it's their job to be nervous about new things.
[ Parent | on HN ]
Re:One of the Most Alarming Internet Proposals I've Seen by icebraining on Monday February 24, 2014 @05:43AM (#7290095)
It might have privacy issues, though. Say you copy the HN logo to your server, and then serve it with an hash. You can then tell if the person has visited HN by seeing if their browser asks for the logo.
[ Parent | on HN ]