{"items": [{"author": "Brian", "source_link": "https://plus.google.com/114156500057804356924", "anchor": "gp-1442679773072", "service": "gp", "text": "Agreed that it requires infrastructure changes, but it doesn't seem insurmountable? I expect to see more automatic support for SRI. When copying a static directory tree, a release script could add hashes automatically. Ads are tricky though.", "timestamp": 1442679773}, {"author": "Jeff&nbsp;Kaufman", "source_link": "https://plus.google.com/103013777355236494008", "anchor": "gp-1442832828582", "service": "gp", "text": "@Brian\n\u00a0The problem with ads (and social widgets and analytics ...) is that one party does the html and another party does the js, and both need to be able to update independently. \u00a0SRI doesn't handle this. \u00a0You could extend SRI to have a public key system [1] to handle this case though.\n<br>\n<br>\nhttp://www.jefftk.com/p/sri-against-the-great-cannon#fb-750309072482_750318084422", "timestamp": 1442832828}]}