Conversely, when you implement strong CSP, Subresource Integrity (SRI), and HTTPS, you are providing an invisible luxury: . Your users can click, browse, and buy without fear. That is the ultimate value proposition.
Content Security Policies are notoriously difficult to implement perfectly on the first try. You will almost certainly break a feature on your website during your first deployment. A script won't load. A style sheet will look broken. csp ramit sethi
References:
Ramit famously preaches the "Automatic Finances" system. He argues that willpower is a limited resource, so you should automate your savings and investments so they happen without you lifting a finger. when you implement strong CSP
Ramit Sethi's advice on CSP involves several strategies: Subresource Integrity (SRI)