Google Project Shield might be a bit more popular than Signed Pages. We know about 16 links to it since March 2021 and only 12 links to Signed Pages. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
Check out Signal. If your friend is a journalist, they should look at Google’s Jigsaw project (https://jigsaw.google.com). Source: over 1 year ago
The Jigsaw User Experience Research Team is gathering feedback about Outline! Source: over 1 year ago
CEO of Jigsaw, Yasmin Green, is a board member of the ADL. Source: almost 2 years ago
Google's Project Jigsaw put paid to a lot of that. Here's Just Interesting talking about how their conspiracy tinged "Uncovered" got buried. It wasn't about "covering up" UFOs in the traditional sense, it was because conspiracy content was being linked by big tech and google to far right extremism, and ufo's got caught in the crossfire. The link has always been there quietly in the background, Jacques Vallee... Source: almost 2 years ago
Note: This is just sample code. Twitter does not own the Perspective API. It is a product of a collaborative research effort by Jigsaw and Google’s Counter Abuse Technology team. - Source: dev.to / almost 2 years ago
There is "Signed Pages" by the debeloper of EteSync. It is a browser extension, that checks webapps based on signatures in the html file. The addon then warns the user if the signature is not correct or - if I remember correctly - the source changed. This allows you to be sure what webapp code was delivered. But it seems like it did not really get used outside of his own projects. - Source: Hacker News / 3 months ago
EteSync has implemented something called Signed Pages, this might be worth looking closer at. This uses PGP keys which is preloaded into the browser; but I suspect that will be a barrier too high for most non-tech users. Source: about 1 year ago
There are also projects like signed web pages which can also help increasing the trust level to some degree. But that requires that you can download the source code and regenerate the verification hash locally - or have other trusted methods to verify the hash value hasn't been modified as well. The current concept is reasonably sane, but it requires too much from users currently to make it widely used. Source: almost 2 years ago
> The server can at any time start serving malicious payloads True, and I call this threat model "Beware Each and Every Fetch" (BEEF) in contrast to the more common TOFU model (although if you trust a desktop app to auto-update itself then these two models might not be all that different). In any case, I think you're being a little quick to dismiss the idea of server-hosted applications. It's true that browsers... - Source: Hacker News / about 2 years ago
Something like a browser extension for this does already exist, fortunately: https://github.com/tasn/webext-signed-pages. - Source: Hacker News / over 2 years ago
Kilo SSL - Automatic SSL management solution for SaaS providers
Marshal - Quickly scan your cloud for exposed sensitive information.
Cloudflare Spectrum - DDoS protection for TCP services
The Security Checklist - The Practical Security Checklist for Web Developers
CloudFlare - Cloudflare is a global network designed to make everything you connect to the Internet secure, private, fast, and reliable.
Google Capture the Flag 2017 - Google's 2nd annual worldwide security competition