It may be tempting to drop the CSRF tokens – CORS is giving us powerful mechanism for discovering that request was sent from different origin – the Origin header. Unfortunately it’s not yet implemented well (to my personal preference) by…
Read more

Hey, I’m too busy right now to write some blog entries, but I may drop something there in future (if I get into the right mood) ;).