Hacker News Reader

This!

Even though I don't think this would have proactively helped this DDoS, but it can't be closer to the truth.

CDNs hosting libraries / fonts / resources for the web are going to be targeted more and more, it is just too attractive to malicious people.

View on HN

This is why I wish we could have a file hash attribute added to certain tags (such as script). It could improve caching across domains and validate the content you're serving up. I proposal was posted here a while ago.

Subresource Integrity - W3C Editor's Draft http://w3c.github.io/webappsec/specs/subresourceintegrity/

Reply on news.ycombinator.com