Re: Trusted Proxy Alternatives Analysis

Le Ven 7 février 2014 22:42, William Chan (陈智昌) a écrit :

> * We might be able to come up with ways to provide additional
> protection for content (thus mitigating your private key concern). For
> example, Subresource Integrity is one such proposal:
> http://w3c.github.io/webappsec/specs/subresourceintegrity/.

As is typical of such proposals, it does not consider that intermediaries
would also like to avoid cache poisoning.

Regards,

-- 
Nicolas Mailhot

Received on Monday, 10 February 2014 10:31:02 UTC