Yeah, you need XDomainRequest for CORS requests in IE8 and 9. IE10 is fully standards-compliant.
http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdoma...
http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdoma...
"to render impotent or deprive of vitality"