According to an answer on SO by Steve Marx it is currently not possible to specifiy access control headers for Blobs in order to make them accessible to cross domain downloads by Ajax clients. Are there any concrete plans to add this mid- to near-term? Unless
I'm mistaken everyone who needs to access his blobs through XMLHttpRequest will need to funnel all requests trough a custom HttpHandler hosted in a WebRole in order to add those headers. Which can't be the way.
To make it clearer I'm referring to this header: Access-Control-Allow-Origin: *
weichhold.com