Skip to main content

Subresource Integrity


TinFoil Security on Subsource Integrity

W3C chat between Joel Weinberger from Chromium and Gervase Markham from Mozilla talking about Subresource Integrity

I've no idea whether this is something a website owner can implement on his or her own. Does it need the cooperation of the asset provider?

The only outside assets I uses are Google fonts. I asked Nik Black from Tinfoil Security, and he answered this way:

The webmaster can calculate the hash independent of the asset provider yes, we usually recommend https://www.srihash.org/ but it looks like they don't handle the Google web font resources correctly. Subresource Integrity Protection is still relatively new, so support for it is still catching up.

Popular posts from this blog

Giveaway Tools

After looking at an article on InsightScope about contest giveaways, I just read the FAQs for one of the tools, which is KingSumo Giveaway and I see that as at the time the FAQs were prepared, the tool doesn't integrate with Mailchimp. Instead you have to download a CSV and upload.Also, there is a warning that the tool may not be compatible with Facebook's terms in the future.Finally, there is a long, convoluted way you have to deal with duplicate content, which is described in the FAQs as follows: I’m concerned about duplicate pages for SEO We don’t create new pages, just add a parameter to your URLS. Google just sees the original page and URL structure. What we recommend if Google results are important is to run the tool, then once it looks like a winner I’d change the Title to the winner and the original URL. Remove the other titles. We are working on a fix to make this easier.Advanced users:Utilize the parameter tools in Google’s Webmaster Tools and set the Headline plugi…

MarsEdit 4

I've been using MarsEdit for just over seven years. I started with version 2, and then upgraded to version 3 in 2010.Now, in 2018, I just upgraded to version 4. This is my first post with the upgrade and I'll report on it in a little while as I get used to the new version.Here is what Daniel of Red Sweater Software has to say about his product:Browser-based interfaces are slow, clumsy, and require you to be online just to use them. Browsers are perfect for reading web content, but not ideal for creating it. If you're serious about writing for the web, you need a desktop blog editor. If you're lucky enough to have a Mac, nothing is more powerful, or more elegant than MarsEditRich and Plain Text Editing MarsEdit's editor switches easily from Plain to Rich Text, so you can work in whichever format you prefer. Love Markdown? MarsEdit can preview it and convert it to HTML if needed.Wildly Compatible Works with WordPress, Blogger, Tumblr, TypePad, Movable Type, and any …

Business For Britain Is Concerned With Business For Britain

This report in the New York Times today


LONDON — Is British business fretting about the risks of the country drifting out of the European Union? Or does it crave a looser relationship with Continental allies, one free from meddlesome regulation?
The answer to that question remained unclear Monday after a newly formed group of business leaders argued for a renegotiation of Britain’s membership terms — echoing the policy of Prime Minister David Cameron, who in January promised voters a referendum on whether the country would remain in the Union.
The new group, called Business for Britain, is intended to counter the intervention of pro-E.U. business leaders who have warned of the dangers of Britain slipping out of the 27-nation bloc and its single market of 500 million people. A statement released Monday to announce the group’s formation was signed by about 500 executives.
I think this opinion in the New York Times article is interesting:

Never much attracted to the idea of European unity,…