HTTP Integrity Digests: Past, Present, and Future

The core HTTP specifications don&rsquo;t define their own means of providing&#xA;integrity. Although &ldquo;hop-by-hop&rdquo; protocols underneath HTTP, such as TLS or QUIC,&#xA;provide integrity for HTTP message transactions, it isn&rsquo;t enough. HTTP powers&#xA;massively distributed systems where intermediaries (aka proxies) are first-class&#xA;citizens. Coupled with that are the powerful…