Google Chrome Adding Support for Signed HTTP Exchanges

[silversurfer]

The Google Chrome team is working on shipping a Signed HTTP Exchanges (SXG) feature with a future Chrome release allowing the browser to load and navigate signed web documents designed to look as originating from a particular source, regardless of the server they're loaded from.

Signed HTTP Exchanges work by allowing content publishers to sign HTTP exchanges so that it can be served via any caching server.

This makes it possible for browsers to load that signed resource from any server while still being able to display the original publisher’s URL in the address bar.

Seeing that in this way the origin of the web content is decoupled from the server used to distribute it, web documents will be published on the Internet without having to depend on a specific server, connection, or hosting service after SXG support will be added to web browsers.

As detailed on the SXG origin trial page, "Signed HTTP Exchange (or "SXG") is a subset of the emerging technology called Web Packages, which enables publishers to safely make their content portable, i.e. available for redistribution by other parties, while still keeping the content’s integrity and attribution."

Source: https://www.bleepingcomputer.com/news/go...exchanges/