W3C home > Mailing lists > Public > www-style@w3.org > August 2006

Re: Web Fonts

From: David Hyatt <hyatt@apple.com>
Date: Thu, 17 Aug 2006 15:09:29 -0700
Message-Id: <EC29FD25-3515-4DA8-BF61-389661ECDE34@apple.com>
Cc: www-style <www-style@w3.org>
To: porneL <mailinglist@pornel.net>

None of these issues have anything to do with my syntactic  
proposal.   Those same questions exist (and in some cases have been  
answered) with the current Web Fonts draft.

dave

On Aug 17, 2006, at 10:14 AM, porneL wrote:

> On Tue, 15 Aug 2006 10:21:21 +0100, David Hyatt <hyatt@apple.com>  
> wrote:
>
>> Wouldn't it be sufficient to simply support the addition of URIs  
>> to font-family?  This would work properly with fallback, and thus  
>> could work in conjunction with installed fonts on the system, and  
>> the URI could be to a zip file that contained all the variants of  
>> a font as well if needed.
>
> And how would these fonts be used and verified?
>
> If they're shared between sites, it'd open possibility of poisoning  
> attack - one site could maliciously send bogus/invalid/damaged  
> fonts to make another site look broken.
>
> Another risk is that webmasters would produce lots of bogus symbol  
> fonts (like Wingdings) to have easy to use custom vector graphics.
>
>
> I think another approach could work - browser could have a list of  
> trusted font repositories - web servies where fonts can be found  
> and downloaded from.
> There needs to be font discovery protocol, however in basic form it  
> may be as easy as dowloading a (zip?) file via URL with a special  
> query string.
> Problems with licensing, verification, etc. could taken care of by  
> font repository provider, completly outside scope of the  
> specification.
>
> -- 
> regards, porneL
Received on Thursday, 17 August 2006 22:09:48 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 27 April 2009 13:54:46 GMT