Improving the trustworthiness of Javascript on the Web

What this post added

Introduces Web Application Integrity, Consistency, and Transparency (WAICT), a W3C-backed effort to bring stronger security guarantees to the web. Details the problem of JavaScript cryptography distribution and proposes solutions involving Subresource Integrity (SRI) and an Integrity Manifest to define and enforce the integrity of entire web applications. Explores achieving transparency through opt-in, append-only logs using hash chains, with requirements for non-centralization, user privacy, and monitorability.