[Integrity] Using hashes to locate the resource

• From: Roman Ivanov <roman.s.ivanov@gmail.com>
• Date: Thu, 20 Mar 2014 08:34:27 -0400
• To: public-webappsec@w3.org
• Message-ID: <532AE053.8050106@gmail.com>

Hello,

The integrity hash from the draft is somewhat similar to a magnet link,
so it can potentially be used to locate resources, rather than
just verify them. This would open up many new possibilities, including
the possibility of building a peer-to-peer caching network, or loading
popular script files from a user-supplied CDN. The hash could also be
used to locate files on the author-supplied CDN without the need to
provide non-canonical URLs for every individual link.

I think it would be extremely beneficial if this was discussed here and
(unless deemed completely irrelevant) somehow reflected in the draft.
After all, the idea is not much more radical than cross-domain caching,
and it was already mentioned on http://wiki.whatwg.org/wiki/Link_Hashes,
which the draft was partially inspired by.

Received on Thursday, 20 March 2014 16:00:40 UTC