Hacker News Reader

There are some efforts to use extensions to allow signing/verification of web assets (assuming you trust the extension/browser), some via third parties:

https://github.com/tasn/webext-signed-pages

https://github.com/jahed/webverify

https://github.com/facebookincubator/meta-code-verify

There was another one posted here recently, but I'm unable to find it now.

View on HN

Probably WEBCAT from the SecureDro team: https://securedrop.org/news/introducing-webcat-web-based-cod...

That's the one! Thanks

Possibly https://github.com/freedomofpress/webcat? (I also made one, a long time ago: https://github.com/twiss/hcs-checker-firefox.)

There is also an effort to build this into browsers directly, which we (Proton) are involved with:

https://github.com/twiss/source-code-transparency (old initial proposal)

https://github.com/beurdouche/explainers/blob/main/waict-exp... (more recent proposal)

https://github.com/beurdouche/w3c-waict/blob/main/waict.bs (very early draft specification)

Reply on news.ycombinator.com