For static resources, it's nothing more than sending this HTTP header "Acess-Control-Allow-Origins: *".

We reached out to jQuery and code.jquery.com does this for a few months now.