{"action":"created","issue":{"url":"https://api.github.com/repos/pwnall/script-digest/issues/1","labels_url":"https://api.github.com/repos/pwnall/script-digest/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/pwnall/script-digest/issues/1/comments","events_url":"https://api.github.com/repos/pwnall/script-digest/issues/1/events","html_url":"https://github.com/pwnall/script-digest/issues/1","id":92364080,"number":1,"title":"Similarity to Subresource Integrity","user":{"login":"mozfreddyb","id":5418775,"avatar_url":"https://avatars.githubusercontent.com/u/5418775?v=3","gravatar_id":"","url":"https://api.github.com/users/mozfreddyb","html_url":"https://github.com/mozfreddyb","followers_url":"https://api.github.com/users/mozfreddyb/followers","following_url":"https://api.github.com/users/mozfreddyb/following{/other_user}","gists_url":"https://api.github.com/users/mozfreddyb/gists{/gist_id}","starred_url":"https://api.github.com/users/mozfreddyb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mozfreddyb/subscriptions","organizations_url":"https://api.github.com/users/mozfreddyb/orgs","repos_url":"https://api.github.com/users/mozfreddyb/repos","events_url":"https://api.github.com/users/mozfreddyb/events{/privacy}","received_events_url":"https://api.github.com/users/mozfreddyb/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-07-01T11:59:45Z","updated_at":"2015-07-01T13:12:07Z","closed_at":null,"body":"Hey!\r\n\r\nA co-worker has shown me your repo and I noticed that your proposal seems like a parallel invention of what we are currently doing (or should I rather say finishing up?) with Subresource Integrity.\r\n\r\nPlease see the [W3C Working Draft](https://w3c.github.io/webappsec/specs/subresourceintegrity/). The top will contain links to our mailing list, github repo, etc.\r\n\r\nAs I said earlier, we're mostly done and are asking for wide review, as this is going in browsers really soon (Firefox is getting it really soon, Chrome Nightly already has this.).\r\n\r\nLooking forward to hearing your feedback!"},"comment":{"url":"https://api.github.com/repos/pwnall/script-digest/issues/comments/117663725","html_url":"https://github.com/pwnall/script-digest/issues/1#issuecomment-117663725","issue_url":"https://api.github.com/repos/pwnall/script-digest/issues/1","id":117663725,"user":{"login":"pwnall","id":11460,"avatar_url":"https://avatars.githubusercontent.com/u/11460?v=3","gravatar_id":"","url":"https://api.github.com/users/pwnall","html_url":"https://github.com/pwnall","followers_url":"https://api.github.com/users/pwnall/followers","following_url":"https://api.github.com/users/pwnall/following{/other_user}","gists_url":"https://api.github.com/users/pwnall/gists{/gist_id}","starred_url":"https://api.github.com/users/pwnall/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pwnall/subscriptions","organizations_url":"https://api.github.com/users/pwnall/orgs","repos_url":"https://api.github.com/users/pwnall/repos","events_url":"https://api.github.com/users/pwnall/events{/privacy}","received_events_url":"https://api.github.com/users/pwnall/received_events","type":"User","site_admin":false},"created_at":"2015-07-01T13:12:07Z","updated_at":"2015-07-01T13:12:07Z","body":"@mozfreddyb Thank you for getting in touch!\r\n\r\nI've been watching the Subresource Integrity work since it was announced on the Chromium mailing lists (since I posted this, I've become a committer there and learned some the ways in which progress happens on the Web).\r\n\r\nI like the `integrity` attribute and how it works. I didn't like the variant that uses CSP headers, because it's more difficult to sort out a list of hashes. \r\n\r\nI really like that you've thought about caching (`Cache-Control: no-transform`) and that the proposal covers Web Components, because of `<link>`.\r\n\r\nI hope that you'll extend the integrity attribute to other resources that can be stored on CDNs. I'm primarily thinking of `<img>` but `<audio>` and `<video>` also come to mind.\r\n\r\nThank you very much for pushing Subresource Integrity though! I look forward to using it! :heart: "}}