Use fetch metadata to solve modern problems

The modern web is a little different than it was back in the days when computers were ruled by IE6. Today, we don’t trust anything sent by a browser because it could be fake. For example, embedded JavaScript, which is a good servant, can also be a very bad master.

But actually, there are cases when we can trust the browser! And that’s what Michal’s talk is all about. He’ll cover the new “Sec-” HTTP headers and show you how, thanks to them and thanks to his favourite Content Security Policy (CSP), the old saying “Fast, good, or cheap – pick two” is no longer true because you can have all three.

For questions and further discussion find the speaker in the Speaker’s Corner right after their talk.