2015-08-30 UTC
# 
Loqi [bridgy] Tom replied '@t CSP improve security, but in the att case HTTPS+HSTS is a better solution. att can remove the CSP but can't strip HTTPS' to a tweet that linked to https://indiewebcamp.com/Content-Security-Policy (https://twitter.com/kermiite/status/637912753756348417)