| ▲ | lxgr 2 hours ago | |
The reason subresource/web application integrity is not more commonly used is that there is no plan to actually do anything with it. How are you going to verify your thousands of dependencies, some of them obfuscated/closed source? And if you can’t, what does integrity buy you? | ||
| ▲ | rhodey an hour ago | parent [-] | |
Would you rather: lose $1.5BUSD or: do dependencies better? | ||