How can I configure Amazon S3 CORS so that Firefox will load remotely hosted webfonts?

Question

I've been trying to set up Amazon S3 as a webfont file host in order to use webfonts on Tumblr.

The CORS configuration suggested by Amazon works fine for everything except Firefox, which is exactly the same situation prior to Amazon enabling this new CORS feature in S3.

<?xml version="1.0" encoding="UTF-8"?>
<CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
<CORSRule>
    <AllowedOrigin>http://fonttester.tumblr.com/</AllowedOrigin>
    <AllowedMethod>GET</AllowedMethod>
    <MaxAgeSeconds>3000</MaxAgeSeconds>
    <AllowedHeader>Authorization</AllowedHeader>
</CORSRule>
</CORSConfiguration>

Is there a different configuration I should be using?

Answer 1

You have to add the below

<CORSRule>
    <AllowedOrigin>*</AllowedOrigin>
    <AllowedMethod>GET</AllowedMethod>
    <MaxAgeSeconds>3000</MaxAgeSeconds>
    <AllowedHeader>*</AllowedHeader>
</CORSRule>