Encorparda Classic Condensed
Playfair
Spiffily NF
The only outside assets I uses are Google fonts. I asked Nik Black from Tinfoil Security, and he answered this way:
The webmaster can calculate the hash independent of the asset provider yes, we usually recommend https://www.srihash.org/ but it looks like they don't handle the Google web font resources correctly. Subresource Integrity Protection is still relatively new, so support for it is still catching up.
"If an opinion contrary to your own makes you angry, that is a sign that you are subconsciously aware of having no good reason for thi...