Why would it need a warning? If the HTML provides a new integrity="" hash, then ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pdkl95 on Sept 19, 2015 | parent | context | favorite | on: Subresource Integrity

Why would it need a warning? If the HTML provides a new integrity="" hash, then any cached version obviously wouldn't pass. Subresource integrity makes it easier to determine if a cached file has expired. The file can be permanently cached for any HTML that requests the same hash value(s).

jefftk on Sept 19, 2015 [–]

The browser could do something with this, but I believe it doesn't. Instead the algorithm is just:

1) Load the resource specified in src (from network or cache)

2) If there's an integrity attribute, verify its hash

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact