2020-12-31 UTC
# 
Zegnat The idea of subresource integrity (https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity) is that you know the dependency has not changed from the one you were originally using. If your site is not on HTTPS, it could protect from MITM rewrites of resources (like when public WiFi networks try to insert their own ads/scripts) by not letting a rewritten resource load. Of course if they wanted to, they could at that