Re: [integrity] What should we hash? from Boris Zbarsky on 2014-03-13 (public-webappsec@w3.org from March 2014)

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Thu, 13 Mar 2014 02:33:12 -0400
To: Devdatta Akhawe <dev.akhawe@gmail.com>
CC: Mark Nottingham <mnot@mnot.net>, "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-ID: <53215128.4010502@mit.edu>

On 3/13/14 2:27 AM, Devdatta Akhawe wrote:
> I think the browser should undo the content-encoding for downloads
> that include integrity metadata.

What does that mean for user-observed behavior in my "concrete example" 
cases?  If it means saving a file called foo.txt.gz which contains 
non-gzipped text, then I object.  ;)

-Boris

Received on Thursday, 13 March 2014 06:33:42 UTC