[webkit-dev] Should we restrict Web Fonts to same-origin by default?
mjs at apple.com
Mon Jun 22 12:38:08 PDT 2009
Mozilla restricts downloaded fonts to same-origin by default, with the
ability for the hosting site to open up access via Access-Control (aka
CORS). Apparently this step has the potential to make font foundries
more comfortable about using straight up OpenType fonts on the Web,
without introducing DRM. Should we follow Mozilla's lead on this?
More information about the webkit-dev