Re: [Wget-dev] wget2 | When clobering css files, remove intergity attribute from html (#393)

[Tim Rühsen]

Thanks, this is quite interesting.

So it prevents a MITM from changing a file ? In your example, if a MITM is able 
to modify the CSS page, why shouldn't he be able to modify 
ae4d1cdcca97ffeb2c35f0878d75dc17.html as well and inject the correct sum ? Or 
remove integrity completely ?

I just wonder how useful this might be.

And not to forget, wget isn't a browser. It downloads the resources, e.g. to be 
displayed/procesed locally by a browser (or other tools). The integrity check 
would still apply in this case.
And people might want to download MITM'ed / broken files for analysis...

-- 
Reply to this email directly or view it on GitLab: 
https://gitlab.com/gnuwget/wget2/issues/393#note_94917424
You're receiving this email because of your account on gitlab.com.