Replying to Avatar s3x_jay

The answer to the NIP-94 debate is in the first paragraph of NIP-94…

> NIP-94 support is not expected to be implemented by "social" clients that deal with kind:1 notes or by longform clients that deal with kind:30023 articles.

I get #[0] 's point…
Avatar
Heri Sim 2y ago

I still don't get why Web SRI was not part of notes. Any href references outside of nostr benefits from an integrity check.

https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

Reply to this note

Please Login to reply.

Discussion

Avatar
s3x_jay 2y ago

Does anyone use that in real life for images or is it just for script/css files?

Avatar
Heri Sim 2y ago

Just for scripts and for good cause.

Avatar
Heri Sim 2y ago

The use of the SRI integrity attribute is due to the rise of CDN services such as https://cdnjs.com which OS trusted by over 12.5% of all websites, serving over 200 billion requests each month.

Some IPFS sites which are supposedly decentralized, import resources from CDNs, exposing them to risks.