Cross Origin Resource Sharing - Good or Bad?

I recently came across this article

http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/

.  From a web developers standpoint I think this is a great idea, one can share information more easily.  From a security standpoint I'm weary on the idea.  I'd need to dissect this even further to get a better grasp on the specifics.  It looks like the server must be setup to provide appropriate information as well as the browser.  Adding another head simply adds to the attack surface of web applications, which thanks to AJAX has already grown tremendously.  It will be interesting to sit and watch the evolution of this new functionality.

 

 

Mobile site Best Practices

It's been awhile since my last post, mainly b/c of time and the fact that it's blocked at work now. Anyway here is a very good list of resources and links for what you will need to develop a mobile site. The standards have come a long way since WAP 1.0.

Mobi Web Developers Guide - requires free registration
W3C Mobile Best Practices
Another XHTML Mobile Profile link
Mobile CSS link

Mobile Icon List

Mobile Emulators - good luck trying to get them to work
Getting Win Mobile Emulator working

.NET Mobile browsers file