There's also a thread about this on typophile, from the font developer's perspective.
That's useful to know. What would've been even more useful would've been a direct link. ;)
Wow 10 years and im just now starting to use it properly ... lol
Rather than having fonts scattered all over the web at multiple URL's which invites anyone to post and use a pirated font (and opens up security concerns), what we probably need is some sort of body to oversee the "web fonts" with a centralized font server.
I'd hate to add more bureaucracy to the mix, but I think this is a solution worth investigating.
That way all fonts are centralized, and can have some sort of authentication process. Font designers could submit their fonts for inclusion to the web fonts library, and a community could be built around the concept.
This potentially would eliminate the need for the extra css code, as the css would first check on the local system, then check in with the font server. (seems like a minor update would take care of this on the browser side, too)
As I said, this adds a layer of bureaucracy, but perhaps the w3c or some other organization could extend itself to take care of this.
Of course, you can't please all of the people all of the time, so some people wouldn't like this setup, but it's much better than what we currently have!