the http://patchwork.sourceware.org/ website doesn't fully load for me. it misrenders and the javascript console is full of: 2016-02-19 01:45:14.368 patchwork.sourceware.org/:14 Refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self' http: https:". Either the 'unsafe-inline' keyword, a hash ('sha256-nG1xoudMpbJeELjsW3kHtsm60dn6+RFwjddORJI/bh0='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback. 2016-02-19 01:45:14.368 patchwork.sourceware.org/:27 Refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self' http: https:". Either the 'unsafe-inline' keyword, a hash ('sha256-VWkG3rR92tqWKwxTi7FGCwo0s3+n19OMWDS2+QN0eiU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback. 2016-02-19 01:45:14.368 patchwork.sourceware.org/:39 Refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self' http: https:". Either the 'unsafe-inline' keyword, a hash ('sha256-matwEc6givhWX0+jiSfM1+E5UMk8/UGLdl902bjFBmY='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback. i guess it's because https://patchwork.sourceware.org/ doesn't have a proper cert ? it presents a cygwin.com cert to me ... -mike