W3C home > Mailing lists > Public > public-webfonts-wg@w3.org > February 2011

Re: SOR: CORS or From-Origin?

From: John Daggett <jdaggett@mozilla.com>
Date: Thu, 10 Feb 2011 17:15:21 -0800 (PST)
To: Tab Atkins <tabatkins@google.com>
Cc: liam@w3.org, public-webfonts-wg@w3.org, Behdad Esfahbod <behdad@google.com>
Message-ID: <1266717033.272625.1297386921921.JavaMail.root@cm-mail03.mozilla.org>
Tab Atkins wrote:

> Applying SOR to all @font-face resources means that you can
> refuse to request a resource altogether based on the url.  You
> don't ever have to make the request at all.

This is only true if the CORS mechanism is not used, if CORS is
used a user agent still needs to do a cross-origin request to
check for the presence of a CORS header that explicitly allows
cross-origin use.  This is behavior Firefox and IE implement for
all font resources.  So in terms of request volume, a same-origin
restriction with CORS for relaxation and Anne's From-Origin
mechanism are pretty much equivalent.  In either case a request
is necessary.

John Daggett
Received on Friday, 11 February 2011 01:16:25 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 11 February 2011 01:16:27 GMT