Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Digitally signed JavaScript files

I've come across some (Microsoft generated) JavaScript files that look like this:

... SOME JAVASCRIPT CODE...

// SIG // Begin signature block
// SIG // MIIaVgYJKoZIhvcNAQcCoIIaRzCCGkMCAQExCzAJBgUr
...
// SIG // 2Ee3yfXCMiZKY8Yv2h0=
// SIG // End signature block

My question is what is the purpose of this digital signature? Yes, I know it is signed with someone's public key and that it helps to identify the author of the file, and yes, I know that it also makes sure nobody has tampered with the file, but what do browsers do with it? How do they use it? What're the benefits of having it in your JavaScript file (besides making your files look much larger :)?

like image 916
Mirko Kojot Avatar asked Dec 30 '14 13:12

Mirko Kojot


1 Answers

It looks like a signed script as described here (WSH vbscript, but WSH can use jscript as well). I suppose is rather pointless in browser context though.

like image 97
KooiInc Avatar answered Oct 03 '22 20:10

KooiInc