I mean if your going to buy a full length anyway specifically for this purpose you may as well consider this; mirror.co. Source: about 1 year ago

The mirror.co article is really messed up though - at the top of the story it claims the guy broke into her home and attacked her, while later in the article it claims she saw some guy stranded outside and invited him in... And yet other articles say they knew each other form the neighborhood, and he had offered to walk her home from work, and asked to sleep over, and she had given him a mattress on the floor. ... Source: about 1 year ago

This is just mirror.co.uk clickbait. Princess Ann was on the balcony for awhile because her mother had just been crowned Queen. She is the daughter of the queen. Archie and Lilibet are the children of the second and estranged son of the King. There is no precedent. Source: about 1 year ago

Combine that with Amex offer - if you see one on your card. That gives $300 off on $1000 purchase on mirror.co. Source: about 2 years ago

Use my code ashiVQVr—you’ll get $100 off The Mirror and I’ll earn 3 months of free Membership. This offer can be combined with the current offer ($750) on mirror.co. Check it out: mirror.co/shop/mirror. Source: over 2 years ago

There is "Signed Pages" by the debeloper of EteSync. It is a browser extension, that checks webapps based on signatures in the html file. The addon then warns the user if the signature is not correct or - if I remember correctly - the source changed. This allows you to be sure what webapp code was delivered. But it seems like it did not really get used outside of his own projects. - Source: Hacker News / 4 months ago

EteSync has implemented something called Signed Pages, this might be worth looking closer at. This uses PGP keys which is preloaded into the browser; but I suspect that will be a barrier too high for most non-tech users. Source: about 1 year ago

There are also projects like signed web pages which can also help increasing the trust level to some degree. But that requires that you can download the source code and regenerate the verification hash locally - or have other trusted methods to verify the hash value hasn't been modified as well. The current concept is reasonably sane, but it requires too much from users currently to make it widely used. Source: almost 2 years ago

> The server can at any time start serving malicious payloads True, and I call this threat model "Beware Each and Every Fetch" (BEEF) in contrast to the more common TOFU model (although if you trust a desktop app to auto-update itself then these two models might not be all that different). In any case, I think you're being a little quick to dismiss the idea of server-hosted applications. It's true that browsers... - Source: Hacker News / about 2 years ago

Something like a browser extension for this does already exist, fortunately: https://github.com/tasn/webext-signed-pages. - Source: Hacker News / over 2 years ago