Ok, comments are back. I am not going to lie, configuring Content Security Policies for disqus on lighttpd is quite annoying because of the multiple domain disqus uses for delivering their service. However since I am not paying (with money) for the service, I won’t complain too much provided the anti-spam engine is top notch.