title: How to protect WebFonts
body: <p>I have a client that wants to host his webfonts on his own server. I have a font.com account where the font was hosted until now. I went truth the <a href="http://www.fonts.com/Legal/WebFontEULA.htm" rel="noreferrer">fonts.com agreement</a> (Point 18.) Where they say, that you can host files on your own server, but you have to protect them as good as possible.</p>
  
  <p>The only way I can think of doing so, is by restricting the requests on those files with <code>HTTP_REFERER</code> in the <code>.htaccess</code>.</p>
  
  <p>Can I do more to protect those fonts? Does it make any sense to make more and do you think that it is a sufficient protection? </p>
  
  <p>I don't personally believe in technical copy protection, you can always copy what you can see somehow. But I don't want my client to get in to legal trouble. Do you have any experience with this? </p>
  
  <p><strong>edit</strong></p>
  
  <p>I'm interested in the legal aspect as well. What can happen, if someone can download the font and reuse it? Do they mean i have to protect the font only from hot-linking or from downloading as well?</p>