Ethereum Foundation Funds Open-Source Project to Verify Website Code Integrity
The Ethereum Foundation has allocated a grant to support the development of WEBCAT (Web-based Code Assurance and Transparency), an open-source project aimed at verifying website code against a signed manifest.
The funding, part of the Trillion Dollar Security initiative, will go towards creating a verification library that can be integrated into Ethereum wallets, as well as research, implementation support, an independent audit, and proposed standardization work for Chromium-browser. The goal is to address a gap between encrypted website connections and code verification.
The current alpha version of WEBCAT's Firefox extension blocks a page and warns the user if verification fails. However, wallet extensions would need to integrate the library, while application teams would need to enroll their domains and serve a signed manifest with each release.