Fonts, SSL and the waterfall

Hi,

Looking at this test https://www.webpagetest.org/video/compare.php?tests=221012_AiDc8M_ASV-r:1-c:0 I see some DNS/Connect/SSL for different hosts / domains, this part is as expected.

Looking into request #2 (a Woff2 file on the host prod-eet-clientresources.azureedge.net) and request #9 (a css file on host prod-eet-clientresources.azureedge.net). I wonder why Request #2 and Request #9 both have Connect and SSL but #9 does not have DNS lookup. Why is the Connection and SSL happening twice on the same host?

The font request, when not on the same origin as the main document, uses a “non-credentialed” connection separate from other requests so 2 connections are needed for the prod-eet… origin (though DNS can be reused).

So it is a special handling of fonts? Anywhere I can read more about this? Thanks