[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Wget-dev] wget2 | When clobering css files, remove intergity attrib
From: |
Tim Rühsen |
Subject: |
Re: [Wget-dev] wget2 | When clobering css files, remove intergity attribute from html (#393) |
Date: |
Thu, 16 Aug 2018 13:33:17 +0000 |
Thanks, this is quite interesting.
So it prevents a MITM from changing a file ? In your example, if a MITM is able
to modify the CSS page, why shouldn't he be able to modify
ae4d1cdcca97ffeb2c35f0878d75dc17.html as well and inject the correct sum ? Or
remove integrity completely ?
I just wonder how useful this might be.
And not to forget, wget isn't a browser. It downloads the resources, e.g. to be
displayed/procesed locally by a browser (or other tools). The integrity check
would still apply in this case.
And people might want to download MITM'ed / broken files for analysis...
--
Reply to this email directly or view it on GitLab:
https://gitlab.com/gnuwget/wget2/issues/393#note_94917424
You're receiving this email because of your account on gitlab.com.
- [Wget-dev] wget2 | When clobering css files, remove intergity attribute from html (#393), megous, 2018/08/16
- Re: [Wget-dev] wget2 | When clobering css files, remove intergity attribute from html (#393),
Tim Rühsen <=
- Re: [Wget-dev] wget2 | When clobering css files, remove intergity attribute from html (#393), Tim Rühsen, 2018/08/16
- Re: [Wget-dev] wget2 | When clobering css files, remove intergity attribute from html (#393), Darshit Shah, 2018/08/16
- Re: [Wget-dev] wget2 | When clobering css files, remove intergity attribute from html (#393), megous, 2018/08/16
- Re: [Wget-dev] wget2 | When clobering css files, remove intergity attribute from html (#393), megous, 2018/08/16