W3C home > Mailing lists > Public > public-css-archive@w3.org > December 2019

Re: [csswg-drafts] [css-fonts] limit local fonts to those selected by users in browser settings (or other browser chrome) (#4497)

From: Henri Sivonen via GitHub <sysbot+gh@w3.org>
Date: Thu, 19 Dec 2019 09:29:38 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-567409499-1576747777-sysbot+gh@w3.org>
> Uniion of all fonts shipped by default by all OSs that an be resonably compliled.

I think that's not a reasonable fingerprinting protection. That way, you could fingerprint a Mac that has Microsoft apps that install fonts from the Windows set.

In my previous comment about intersections and unions, I meant that the _Mac-specific_ allow-list would be the intersection of the macOS locale-specific configurations and the _Windows 10-specific_ allow-list would the an union of the Windows 10 locale-specific configurations. (This assumes that you can fingerprint macOS vs. Windows 10 regardless of fonts anyway.)

> I want to emphasize we need to address impact on minority language population and limiting to default fonts won't cut it. Need to not harm those communities. You can't use web fonts for things like this. Places with minority language are also where downloads are slower and more costly. need to make sure we address that head on

This indeed needs a solution. Sadly, logically you can't have both unconditional font fingerprinting protection and support for scripts whose fonts aren't covered by the OS bundled set (either not covered at all or not covered to the satisfaction of the users).

Is there data about what those scripts are these days?

> South Indian it's common to install locally used fonts.

Is there up-to-date data about this? (I'm aware of pre-iOS/Android-era windows-1252 fonts with Tamil glyphs was common, but I have been unable to get even Twitter anecdata about whether that's still a relevant issue for sites browsed only from desktop of if the difficulty of installing fonts on phones has forced sites to adapt not to being able to expect users to install such fonts.)

-- 
GitHub Notification of comment by hsivonen
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/4497#issuecomment-567409499 using your GitHub account
Received on Thursday, 19 December 2019 09:29:39 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 06:41:57 UTC