MyMonero and Urbane Security at Magical Crypto Con announce new web resource integrity protocol and browser plugin called SecureBrowse, to eliminate risk of compromised JS

Read the RFC or get involved as a contributor at https://gitlab.com/securebrowse/securebrowse

Download the plugin at https://securebrowse.gitlab.io/securebrowse/

We see this being useful for a very wide range of websites and hope lots of web admins end up deploying the protocol to increase web security.

Support for legacy Safari browsers does exist but Apple has just switched to allowing only native browser plugins, so a native port of the plugin will need to be made for future Safari support.

We highly recommend you install this plugin if you use the MyMonero.com web wallet.

Great idea & implementation!

However, I think this is mostly suitable for high risk (one/few page) sites like wallets, online banking, password managers and stuff like that, right? It would be merely suitable for mass-content sites with thousands of subpages for each you'd have to deliver hashes as TXT records. Okay, you might deliver few templates for different types of subpages as static HTML and load the content itself asynchronously which you could prevent to include code (if the content delivering server was compromised)...