Ever heard of Web Bundles?
Ever heard of Web Bundles?
This is a genuine question. It is such a simple feature, zipping an HTML file with all of its resources. Why do we need that many standards for it. Is it NIH syndrome or are there technical reasons in doing so?
The more important things to specify are the browser behaviors when working with such files and the signature mechanisms, and those specifications you'd also need if you reused a format.
The key would probably have to be delivered in-band, requiring a TOFU security policy, but that's not so bad.
Ideally the browser would also keep track of which version of the app it loaded last time, and give the user the option of fetching a newer version if one is available, to prevent malicious updates.