logoalt Hacker News

lxgr • today at 7:39 PM • 1 reply • view on HN

The reason subresource/web application integrity is not more commonly used is that there is no plan to actually do anything with it.

How are you going to verify your thousands of dependencies, some of them obfuscated/closed source? And if you can’t, what does integrity buy you?


Replies

rhodey • today at 8:30 PM

Would you rather: lose $1.5BUSD or: do dependencies better?