Well said!<p>I know one thing I would like is Cloudflare doing something magical with Sub Resource Integrity.<p>Maybe if the source HTML specifies a SRI string, check that the hash in the HTML matches the hash of the resource before allowing it in your cache for that website. If it doesn&#x27;t match, don&#x27;t cache that resource and don&#x27;t serve it.<p>This would allow sites to enable and enforce SRI without browser support.