TechPrufer
Get started
Cloudflare
Cloudflare logoCloudflare · Feature trail

Web Application Integrity and Transparency

1 post · Oct 2025

What this trail covers

Cloudflare is contributing to the development of Web Application Integrity, Consistency, and Transparency (WAICT), a W3C-backed effort to bring stronger security guarantees to the web. WAICT aims to provide integrity, consistency, and transparency for web applications, similar to the security properties offered by app stores for smartphone applications. This includes defining web applications through integrity manifests and establishing a transparent, append-only log for web application code. The system is designed to be opt-in, avoid extra round trips, preserve user privacy, and be non-centralized and easily auditable.

All Cloudflare trails
  1. Improving the trustworthiness of Javascript on the WebThis post introduces the Web Application Integrity, Consistency, and Transparency (WAICT) effort, a W3C-backed initiative to enhance web application security. It details the problem of ensuring the trustworthiness of JavaScript cryptography on the web, drawing parallels to app store security models. The post outlines the proposed solutions: Subresource Integrity (SRI) and Integrity Manifests for defining and verifying web application assets. It also introduces the concept of a hash chain as a fundamental data structure for achieving transparency, enabling auditable append-only logs of web application code. The post lays out nine requirements for a transparent web system, including opt-in participation, no added round trips, user privacy, statelessness, non-centralization, ease of opt-in/out, transparent opt-out, and monitorability.