Hacker News Reader

Have a look at this: https://blog.cloudflare.com/announcing-amp-real-url/

Cloudflare allow using of same domain to use AMP. In this case, content is served from Cloudflare CDN.

Note the Cloudflare hosted AMP pages still mandate AMP requirements, like including a Google controlled JS uri in your content. Signing is moot if you allow Google to run arbitrary JS on your content. They haven't abused it yet, but it's allowed by spec. Subresource integrity isn't mandated, explained, or recommended.

It's called Signed Exchange and it's the same thing the comment you replied to is about.

Reply on news.ycombinator.com