[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Wget-dev] wget2 | When clobering css files, remove intergity attrib

From: Tim Rühsen
Subject: Re: [Wget-dev] wget2 | When clobering css files, remove intergity attribute from html (#393)
Date: Thu, 16 Aug 2018 13:33:17 +0000

Thanks, this is quite interesting.

So it prevents a MITM from changing a file ? In your example, if a MITM is able 
to modify the CSS page, why shouldn't he be able to modify 
ae4d1cdcca97ffeb2c35f0878d75dc17.html as well and inject the correct sum ? Or 
remove integrity completely ?

I just wonder how useful this might be.

And not to forget, wget isn't a browser. It downloads the resources, e.g. to be 
displayed/procesed locally by a browser (or other tools). The integrity check 
would still apply in this case.
And people might want to download MITM'ed / broken files for analysis...

Reply to this email directly or view it on GitLab: 
You're receiving this email because of your account on gitlab.com.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]