Re: Font MIME types

On Fri, Apr 3, 2015 at 9:40 PM, Zack Weinberg <> wrote:
> A top-level MIME category for fonts is not necessary.  Neither are new
> registrations.  Font type detection based EXCLUSIVELY on in-band
> metadata is the correct way to do it.

Of course, the font engine would still do that. This is however about
preventing non-font files from entering that code path as determined
by the server administrator. E.g. if someone allows CSS files to be
uploaded that are not validated, they could then not be used as fonts.

It would be nice if browsers always looked at file signatures first,
but they don't and I suspect that changing that would actually break
some (bizarre) setups. (Even better would be if all files had a
required signature, but that's also not true.)


Received on Saturday, 4 April 2015 06:58:34 UTC