W3C home > Mailing lists > Public > www-style@w3.org > June 2009

Re: New work on fonts at W3C

From: Aryeh Gregor <Simetrical+w3c@gmail.com>
Date: Thu, 25 Jun 2009 12:55:32 -0400
Message-ID: <7c2a12e20906250955r1c750fdfu8a292c5e08579457@mail.gmail.com>
To: "Levantovsky, Vladimir" <Vladimir.Levantovsky@monotypeimaging.com>
Cc: robert@ocallahan.org, Brad Kemper <brad.kemper@gmail.com>, Jonathan Kew <jonathan@jfkew.plus.com>, www-style@w3.org
On Thu, Jun 25, 2009 at 12:43 PM, Levantovsky,
Vladimir<Vladimir.Levantovsky@monotypeimaging.com> wrote:
> There are other ways to block font linking from other sites that do not
> require root strings or CORS
> (http://openfontlibrary.org/wiki/Blocking_drive-by_access).

Referer-based methods are unreliable, and can block users of your own
site as well as letting through users of other sites.  Some software
will strip referer headers, or even change them.  (For instance, IIRC,
no browser sends Referer headers from an HTTPS site to an HTTP site.)
Depending on referer checking isn't a good idea.
Received on Thursday, 25 June 2009 16:56:15 UTC

This archive was generated by hypermail 2.4.0 : Friday, 25 March 2022 10:07:37 UTC