- From: Håkon Wium Lie <howcome@opera.com>
- Date: Wed, 11 May 2011 15:07:00 +0200
- To: John Daggett <jdaggett@mozilla.com>
- Cc: W3C style mailing list <www-style@w3.org>, www-font@w3.org
John Daggett wrote:
> Based on discussions with the Fonts WG, in the latest editor's
> draft of the CSS3 Fonts spec I've moved the description of the
> same-origin restriction from an appendix into the section where
> the @font-font rule is defined:
>
> http://dev.w3.org/csswg/css3-fonts/#same-origin-restriction
>
> This was done to reflect the rough consensus that allowing for
> some form of origin restriction for fonts with the ability to
> relax it was desirable.
>
> There's been disagreement about the exact way to relax the
> restriction, whether to use CORS which both Firefox and IE9 use,
> or to come up with a more general mechanism for all linked
> resource types (Anne's From-Origin proposal), so there's wording
> noting that the exact mechanism used may change.
Anne's proposal is sketched here:
http://dvcs.w3.org/hg/from-origin/raw-file/tip/Overview.html
and argued for here:
http://annevankesteren.nl/2011/02/from-origin
I like the idea of having one mechanism for all web resources. This
way, css3-fonts doesn't need to say anything about HTTP headers and
such (which arguable is outside its scope). If we -- in CSS --
introduce a mechanism for @font-face, it's unlikely that a web-wide
mechanism will be established.
However, introducing a new web-wide mechanism is a big deal which
needs acceptance from more than just the css/fonts folks.
For now, I propose adding references to Anne's proposal in the issues:
http://dev.w3.org/csswg/css3-fonts/#same-origin-restriction
Cheers,
-h&kon
Håkon Wium Lie CTO °þe®ª
howcome@opera.com http://people.opera.com/howcome
Received on Wednesday, 11 May 2011 13:10:57 UTC