Re: css3-fonts: should not dictate usage policy with respect to origin

I believe we could agree to the first, but not to the second. In fact, we
want to make the second to read as:

       UAs MUST NOT, by default, treat webfont resources as
       same origin restricted.

In the absence of an author declaring either a restriction or a relaxation,
we believe the default should be NO restriction.

G.

On Mon, Jun 20, 2011 at 12:24 PM, John Hudson <tiro@tiro.com> wrote:

> Glenn wrote:
>
>  I believe Samsung could agree to making an authorial opt-in mechanism a
>> mandatory feature on UAs that access WOFF; however, I believe we will not be
>> able to agree with a policy that requires use of a restrictive opt-out
>> mechanism which by default would prevent access.
>>
>
> Would this be satisfactory, in terms of a Webfonts Conformance
> Specification (exact wording to be drafted, this is just to capture the
> intent)?
>
>        UAs MUST respect author header settings restricting
>        or relaxing same origin.
>
>        UAs SHOULD, by default, treat webfont resources as
>        same origin restricted.
>
> I think many of us would want to make that second statement a SHOULD rather
> than a MAY, simply to encourage UA makers to give serious thought as to
> whether they have a good reason not to treat webfont resources in this way.
>
> JH
>