0E800 I checked the websites again in IE.
When browsing discussions with insecure images on them, IE writes in the console (placeholder for the link):
I have no idea if that's because of CSP or standard HTTPS warnings (Firefox displays a warning for mixed content too, no need for CSP)
Whatever, the image is displayed, so this means CSP is not working. No message indicating a parse error for CSP either.
On your website, I get:
DOM7011: The code on this page disabled back and forward caching. For more information, see: http://go.microsoft.com/fwlink/?LinkID=291337
File: 11
HTML1300: Navigation occurred.
File: keys-daggers.org
DOM7011: The code on this page disabled back and forward caching. For more information, see: http://go.microsoft.com/fwlink/?LinkID=291337
File: 11
CSS3114: @font-face failed OpenType embedding permission check. Permission must be Installable.
File: origicide.ttf
No idea if that font-face permission thing is due to CSP or not.
Again, your website displays with no problems, probably because CSP rules are not parsed at all...
The "About Internet Explorer" tells me I am running:
Version: 11.0.9600.17416
Update versions: 11.0.14 (KB3003057)
No idea if that's up to date or not. I'm using the official Microsoft IE11 VM because I'm on Linux.
Maybe CSP are enabled in a later version ? Do you want me to check if I can get an update ?
