[alcover]

What if browsers supported a property like <script hash=64192876> ? They would store the hash on first connection then verify on subsequent ones.

I know this should be refined and hardened but you get the idea.