There is no need for csp and content-security-policy to co-exist, as one is just the abbreviation of the other. For some reason, I can't make csp a synonym of content-security-policy, stating I don't have enough reputation.
I have merged csp into content-security-policy and set the synonym.
Aside: this can be done without moderator intervention via enough upvotes on a tag synonym.
While I agree that in the world of web appsec,
CSP == Content Security Policy, I'm not sure that's true in all areas of information security.
Taking a look at the wikipedia disambiguation page for CSP, the following jump out as potential legitimate uses of "CSP" on this site:
- Credential Service Provider -- seems to be a US Gov term for an authority who issues any kind of e-credentials.
- Critical Security Parameter -- Defined in FIPS 140-2 as
"Critical security parameter (CSP): security-related information (e.g., secret and private cryptographic keys,and authentication data such as passwords and PINs) whose disclosure or modification can compromise the security of a cryptographic module."
- Cryptographic Service Provider -- A Microsoft Windows term for CAPI-like plugins.
- Cloud Service Provider -- synonym for Cloud Computing.