Re: [manifest] Define identity of a web app. (#272)

That still doesn't solve issues like third parties being able to set say a splash screen promoting a different product etc. Add stuff to the icons etc... maybe that is not a bit deal, but if there were a simple way of solving it, that would be nice.

If the manifest is linked from the site itself, a checksum would do. I think CSP 2.0 has something like that

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/272#issuecomment-83988024