Re: [manifest] Add integrity to image objects (#411)

> Something like SRI would be useful more generally, so that manifests could point to fonts, stylesheets and scripts. That way a single offline signature could be used to secure an entire web application.

Although it could be good, I'd prefer we don't overreach (i.e., let's stick to the things the manifest handles, instead of the things that belong to HTML). In any case, we would need to discuss any such addition with the Web App Sec group.

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/411#issuecomment-174815451