Hacker News Reader

In cryptography there is the clear difference between encrypting and signing (Confidentiality and Integrity). Is this distinction possible on a webserver/browser? I.e. No encryption, no signing -> HTTP Encryption and signing -> HTTPS No encryption, signing -> ? What about public information (not confidential) that needs verification (yes integrity)?

View on HN

Don’t think it exists for the HTML document. HTTPS works fine for public & unconfidential things. For verifying page resources there is a newish feature: https://developer.mozilla.org/en-US/docs/Web/Security/Subres... .

Something like this maybe: https://tools.ietf.org/id/draft-hallambaker-httpintegrity-02... although it's an unimplemented draft.

Reply on news.ycombinator.com