Apologies, server went down without me noticing and because I used Full Disk Encryption it was stuck at the encryption passphrase prompt during reboot.

#securityvsconvenience

Subresource integrity: when you load JavaScript from a third-party Web site (like British Airways did when they were cracked), you can specify a hash of the code, and it will be checked by the browser. (Of course, this is quite static, if the script changes, it won't work anymore). #securityVsConvenience #ParisWeb