For content that is already public but needs to be protected from modification l... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

asdfaoeu on Feb 24, 2012 | parent | context | favorite | on: Should All Web Traffic Be Encrypted?

For content that is already public but needs to be protected from modification like images and scripts couldn't it be hashed and the hash just sent with the page your viewing. Then the browser could download extra assets from an insecure source like a proxy or cdn and know that it hasn't been modified?

wmf on Feb 24, 2012 [–]

So then the browsers have to implement two security systems.

alexchamberlain on Feb 24, 2012 | [–]

Not entirely, as SSL already includes a hash. That said, I don't agree with doing it.

However, I do believe that we should investigate ways of authenticating larger downloads automatically.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact