Does anyone know the preferred (current) method of sending referrer directives between the referrer-policy header[1] and the referrer directive under Content Se

Does anyone know the preferred (current) method of sending referrer directives between the referrer-policy header[1] and the referrer directive under Content Security Policy (CSP) 1.1[2]? Since these specs are evolving, there is a lot of contradictory documentation online, and it's tough to weed out what's the accepted solution (if there is one). Presumably using headers (of some sort) is preferable to meta tags where possible though? Edit: As mentioned by davecardwell, the always/never/default settings, which are referenced in my CSP link there, are deprecated. Perhaps the whole concept of serving the referrer policy via CSP is as well? [1] https://w3c.github.io/webappsec-referrer-policy/#referrer-policy-delivery https://w3c.github.io/webappsec-referrer-policy/#referrer-po... [2] https://www.w3.org/TR/2014/WD-CSP11-20140211/#referrer https://www.w3.org/TR/2014/WD-CSP11-20140211/#referrer