Re: [SRI] Call for Consensus: Subresource Integrity to Candidate Recommenation from Anne van Kesteren on 2015-10-07 (public-webappsec@w3.org from October 2015)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Wed, 7 Oct 2015 07:23:07 +0200
To: Francois Marier <francois@mozilla.com>
Cc: WebAppSec WG <public-webappsec@w3.org>
Message-ID: <CADnb78ju=FPMjMWoEMKqdc8otriERc6nzMnNqCyXQ-MQcmg-LA@mail.gmail.com>

On Tue, Oct 6, 2015 at 11:08 PM, Francois Marier <francois@mozilla.com> wrote:
> I see two:

I also remember giving you feedback on
https://w3c.github.io/webappsec-subresource-integrity/#is-response-eligible-for-integrity-validation.
That it should just be a simple check on response's type and nothing
else. Cannot locate that though. And deferring upstreaming of the
attribute definitions does not seem great. That's where you'll get the
real review on their definitions.


-- 
https://annevankesteren.nl/

Received on Wednesday, 7 October 2015 05:23:35 UTC