Daniel Vogelheim

How does this interact with CSP?

2

Content Security Policy interacts with Subresource Integrity. For ed25519 signature, the extension of this interaction is probably straightforward, but.... should maybe still be specified.

Who Is Strongest?

2

Subresource Integrity specifies to [get the strongest metadata from the set](https://www.w3.org/TR/SRI/#get-the-strongest-metadata-from-set) of supplied SRI constraints, but unfortunately forgot to mention what strongest means in this context. This would be reasonably...

Integrity Signature Header is Under-Specified

3

The Integrity: header is only introduced as: > Integrity: ed25519-[base64-encoded result of Ed25519(`console.log("Hello, world!");`)] 1. It doesn't say anything about whether there can only be one or multiple values per...