Hacker News Reader

Make sense. Subresource integrity looks very easy to implement for developers, but what about CDNs? Is it difficult for them to implement CORS?

For static resources, it's nothing more than sending this HTTP header "Acess-Control-Allow-Origins: *".

We reached out to jQuery and code.jquery.com does this for a few months now.

As long as jQuery is compliant, I feel like you've probably covered 80% of all use cases on the web.