That is why I strongly prefer open-source software that is easily verifiable with SRI and checksums.
You are viewing a single comment's thread from:
That is why I strongly prefer open-source software that is easily verifiable with SRI and checksums.
SRI or Subresource Integrity is used for websites that load Javascript, to ensure that the scripts loaded were not tampered with at any time from webserver to the client's browser.
I just learned that few months ago too, certain CDN JS now requires integrity/hash and "anonymous" attribs, it will fail if not supplies correctly to the script tag.