https://w3c.github.io/webappsec/specs/subresourceintegrity/

@mnot wants to keep an eye on this; it also has lots of general architectural implications we should all keep in mind.