[derefr]

AFAICT you could permanently trust a webapp loaded from an IPFS-scheme URI (as e.g. Brave can do), after it’s been audited once.

[fastball]

But then if you're using an IPFS gateway instead of hosting your own instance then the gateway could serve you different content, no?

[fwtf]

Since you request data by a hash, and your software should verify the downloaded data has the same hash, no.

[stavros]

If you're using a gateway, you have to trust the gateway.

[arlort]

You could probably have a pretty light wrapper around the gateway which verifies the hash.

It wouldn't be as easy as simply using a gateway but still much easier than hosting/implementing an IPFS node locally

[stavros]

Well, to use the node locally you just run a binary, it's not like there's much to it.

[fastball]

No, but getting at content can sometimes take a while if it's not very actively seeded, e.g. I've had to wait hours for images to load on IPFS.