Hacker News new | ask | show | jobs
by mike_organon 5157 days ago
CORS is more secure than JSONP. http://en.wikipedia.org/wiki/Cross-origin_resource_sharing
4 comments

And in case anyone is wondering, that's how the Easier option is implemented (CORS), whereas the Easy option is just JSONP.

OP could probably make it more explicit since it's not just a JSONP service, but also a CORS relay.

I wanted to use CORS a while ago but without Opera and IE 6 and 7 supporting it, it'll take a while until it will be an alternative to JASONP.
irrelevant really- you can't set the CORS header on a remote API you don't own.
that's kind of the point. CORS just tells the browser to block the response, so this proxies the request and simply changes the headers to avoid that restriction.
More functional too, but it requires complicity from the remote server.
JSONP requires complicity from the remote server too