Be more specific about "most collision-resistant"

[noamr]

Should the strength of the algorithm should not be implementation defined? Isn't this a known quality?
See whatwg/html#7738

[annevk]

To elaborate a bit, given that we only allow 3 algorithms and new algorithms will have to be defined in the specification, I think we can just define their strength and not leave this up to implementations.

[mozfreddyb]

Agreed, it makes sense. Did Chrome ever ship https://github.com/mikewest/signature-based-sri, @mikewest?