Re: css3-fonts: should not dictate usage policy with respect to origin

I believe we could agree to the first, but not to the second. In fact, we
want to make the second to read as:

       UAs MUST NOT, by default, treat webfont resources as
       same origin restricted.

In the absence of an author declaring either a restriction or a relaxation,
we believe the default should be NO restriction.


On Mon, Jun 20, 2011 at 12:24 PM, John Hudson <> wrote:

> Glenn wrote:
>  I believe Samsung could agree to making an authorial opt-in mechanism a
>> mandatory feature on UAs that access WOFF; however, I believe we will not be
>> able to agree with a policy that requires use of a restrictive opt-out
>> mechanism which by default would prevent access.
> Would this be satisfactory, in terms of a Webfonts Conformance
> Specification (exact wording to be drafted, this is just to capture the
> intent)?
>        UAs MUST respect author header settings restricting
>        or relaxing same origin.
>        UAs SHOULD, by default, treat webfont resources as
>        same origin restricted.
> I think many of us would want to make that second statement a SHOULD rather
> than a MAY, simply to encourage UA makers to give serious thought as to
> whether they have a good reason not to treat webfont resources in this way.
> JH

Received on Monday, 20 June 2011 18:54:25 UTC