https sorting and csp