Re: [csswg-drafts] [css-fonts] limit local fonts to those selected by users in browser settings (or other browser chrome) (#4497)

> 1. Build lists of default fonts shipping on windows, Mac and popular linux OSs.
> 2. define OS-installed-fonts fonts as the intersection of the above set, and fonts on the user's machine

Indeed, this would be the most realistic way forward if for step 1 you  take the _intersection_ of sets that can be installed by default depending on the install-time language on macOS and on Windows 10 and Ubuntu you take the _union_ of such sets. (On macOS, the intersection is already good but the user can install the rest potentially one-by-one, so the union would leave a lot of fingerprinting surface as long as the mechanism mentioned two comments up is private. On Windows 10, the intersection isn't good enough, but the fonts not in the intersection get installed in bundles, which still leaves a large number of combinations, but not as large as installing fonts one-by-one. On Ubuntu, the user could go install fonts that are in the union but not in the intersection one-by-one, but the intersection isn't good enough, so what can you do.)

To improve privacy compared to that on Windows 10 and Ubuntu would involve those systems making their intersection set more Mac/Fedora-like, which is not something that browsers can do for them, but would then allow switching to the intersection instead of the union.

-- 
GitHub Notification of comment by hsivonen
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/4497#issuecomment-565942405 using your GitHub account

Received on Monday, 16 December 2019 07:41:34 UTC