Re: Reminder: Conference call: SOR and CORS vs. From Origin

On Wednesday, February 16, 2011, 4:09:31 PM, Erik wrote:

EvB> An author who wants to host a licensed font then has to fiddle
EvB> with the server to include the From-Origin header in responses to requests to the font. Right?

Yes.

EvB> To get an idea of the complexity of this proposal: is including
EvB> the header a matter of, for instance, fiddling with a http.conf,
EvB> or does it require server application updates?

http.conf, or a per-directory .htaccess file.

EvB> It was mentioned to include this in future default settings of
EvB> Apache distributions. In general, how difficult is it to get settings added to Apache?

Its possible. It helps if the specification that is prompting the update s stabe and widely implemented.

EvB> Similarly access to the raw data (e.g. from an image or font) remains prohibited.

EvB> I'm not sure what Van Kesteren means - access by whom?

I'm not sure on that one either.


-- 
 Chris Lilley   Technical Director, Interaction Domain                 
 W3C Graphics Activity Lead, Fonts Activity Lead
 Co-Chair, W3C Hypertext CG
 Member, CSS, WebFonts, SVG Working Groups

Received on Wednesday, 16 February 2011 16:26:13 UTC