cross-origin resource sharing

[pfefferle]

Should we require the cors header (Access-Control-Allow-Origin: *) to enable webmentions via javascript?

[snarfed]

i'm going to pretend this is a democracy and cast a yes vote for this. :P

[sandeepshetty]

Feel free to send in a pull request for this.

[pfefferle]

Should we "recommend" or "require" it???

[sandeepshetty]

Do you have a reason to "require" it?

[pfefferle]

As i said... To enable mentions via JavaScript...

[sandeepshetty]

I meant something along the lines of "Considering the increasing popularity of static sites/blogs these days, it might make sense to require cors. Although this will allow the ability to send webmentions via JS, they'll still require a third party service to accept webmentions. Which means if you decide to accept webmentions via JS you cannot respond back to them."

Then we can talk about the pro/cons about allowing people to talk without giving us the ability to talk back to them.

[pfefferle]

@sandeepshetty that sounds perfect!

[sandeepshetty]

Based on my comment above about the asymmetry, I'm leaning towards a SHOULD or MAY, unless someone has a strong reason for a MUST.