SRI and CORS from Anne van Kesteren on 2014-07-03 (public-webappsec@w3.org from July 2014)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Thu, 3 Jul 2014 11:02:50 +0200
To: WebAppSec WG <public-webappsec@w3.org>
Message-ID: <CADnb78hj0eyuuc4uPLW47c_TdQ1W0NFZRXgzpsbB=TwiuJiKrQ@mail.gmail.com>

It seems that if you can already proof what the bits of a resource
are, maybe you should be able to get hold of it with all the benefits
of CORS. Probably given a secure enough hash algorithm. Have people
been thinking about this?


-- 
http://annevankesteren.nl/

Received on Thursday, 3 July 2014 09:03:17 UTC