Smth that concirns me with the new policy headers is that on the one hand we are talking about unneeded bloat in image files, on the other hand we are adding quite bloaty way to solve it. CSP header is very verbose, I have seen headers that are miles in length. FP header seems to head to the same port. There should be a better way than serving kilobytes of headers with requests. Maybe site manifest to resque?