Use Garamond.
You could even use it as the default (just typing in Garamond rather than embedding it) and have a fall-back. It's considered to be "web safe".