tomayac’s Twitter Archive—№ 12,496

@treshugart Great in theory, but either way (pull or push) it can be abused for fingerprinting: w3c.github.io/webappsec-subresource-integrity/#cross-origin-data-leakage httpwg.org/http-extensions/cache-digest.html#security-considerations I still wish there was a way to make this happen…