RE: Nonce for CSS, Signature of script, link, img?

Mountie,

The use cases are network-focused: that it would allow an application to protect itself from modifications to content loaded over insecure transports (like http) or from unauthorized server-side modifications to content loaded over secure transports.

-Brad

From: mountie@paygate.net [mailto:mountie@paygate.net] On Behalf Of Mountie Lee
Sent: Wednesday, January 30, 2013 4:44 PM
To: Hill, Brad
Cc: Hendrik Brummermann; public-webappsec@w3.org
Subject: Re: Nonce for CSS, Signature of script, link, img?

Hi.
thanks for your information.

one question I have is
is this suggestion give protection for stored JS code or installable webapp?

regards
mountie.
On Thu, Jan 31, 2013 at 9:33 AM, Hill, Brad <bhill@paypal-inc.com<mailto:bhill@paypal-inc.com>> wrote:

please share the link for "Sub-Resource Integrity" and related information.




[Hill, Brad] http://lists.w3.org/Archives/Public/public-webappsec/2012Nov/0129.html



--
Mountie Lee

PayGate
CTO, CISSP
Tel : +82 2 2140 2700
E-Mail : mountie@paygate.net<mailto:mountie@paygate.net>

=======================================

PayGate Inc.

THE STANDARD FOR ONLINE PAYMENT

for Korea, Japan, China, and the World