Content Security Policy is best used as defense-in-depth, to reduce the harm caused by content injection attacks.
Google's hosted library for web fonts. Allows websites to choose and use fonts from a free, wide variety of fonts.
Typekit is the easiest way to use real fonts on the web. It's a subscription-based service for linking to high-quality Open Type fonts from some of the worlds best type foundries.