Tuesday, January 12, 2016
TinFoil Security on Subsource Integrity
W3C chat between Joel Weinberger from Chromium and Gervase Markham from Mozilla talking about Subresource Integrity
I've no idea whether this is something a website owner can implement on his or her own. Does it need the cooperation of the asset provider?
The only outside assets I uses are Google fonts. I asked Nik Black from Tinfoil Security, and he answered this way:
The webmaster can calculate the hash independent of the asset provider yes, we usually recommend https://www.srihash.org/ but it looks like they don't handle the Google web font resources correctly. Subresource Integrity Protection is still relatively new, so support for it is still catching up.
I've been using MarsEdit for just over seven years. I started with version 2, and then upgraded to version 3 in 2010. Now, in 2018, I...
I am pleased to be able to make the statement in the title to this article and I want to explain how I have done it and how I came to hear ...
After looking at an article on InsightScope about contest giveaway s, I just read the FAQs for one of the tools, which is KingSumo Giveaway ...