Re: [Integrity] Using hashes to locate the resource

Hi Roman, thanks for the suggestion!

There's certainly some discussion of caching implications in the spec:
http://w3c.github.io/webappsec/specs/subresourceintegrity/#caching-optional-1

Does that cover some of what you're asking for, or do you have something
else in mind (something RFC5785-like, ".well-known/<hash>"?)? If so,
perhaps you spell out the proposal in a bit more detail?

-mike

--
Mike West <mkwst@google.com>
Google+: https://mkw.st/+, Twitter: @mikewest, Cell: +49 162 10 255 91

Google Germany GmbH, Dienerstrasse 12, 80331 München, Germany
Registergericht und -nummer: Hamburg, HRB 86891
Sitz der Gesellschaft: Hamburg
Geschäftsführer: Graham Law, Christine Elizabeth Flores
(Sorry; I'm legally required to add this exciting detail to emails. Bleh.)


On Thu, Mar 20, 2014 at 1:34 PM, Roman Ivanov <roman.s.ivanov@gmail.com>wrote:

> Hello,
>
> The integrity hash from the draft is somewhat similar to a magnet link,
> so it can potentially be used to locate resources, rather than
> just verify them. This would open up many new possibilities, including
> the possibility of building a peer-to-peer caching network, or loading
> popular script files from a user-supplied CDN. The hash could also be
> used to locate files on the author-supplied CDN without the need to
> provide non-canonical URLs for every individual link.
>
> I think it would be extremely beneficial if this was discussed here and
> (unless deemed completely irrelevant) somehow reflected in the draft.
> After all, the idea is not much more radical than cross-domain caching,
> and it was already mentioned on http://wiki.whatwg.org/wiki/Link_Hashes,
> which the draft was partially inspired by.
>
>
>