Re: [csswg-drafts] [css-fonts] incorporate mitigations for font based fingerprinting (#4055)

1. many people see *passive* fingerprinting as not solvable given the web's API surface.  Refuting that requires gathering the data from the various sources to see what the state of things is (see below), not just hoping.  Agreeing to solve it needs to be a wide consensus, not a bunch of ad hoc and inconsistent decisions made in different working groups to different standards.

2. many of the papers used flash-based font data, which is much more identifying since it's an *ordered* list of fonts, not just a set.  That's why I'm suggesting that the convincing thing is to maintain a common repository of the state of fingerprinting rather than point to a bunch of papers all/most of which are seriously out of date in various ways, and all of which are incomplete.

4. many users use an OS and browser whose UI doesn't match their preferred language

-- 
GitHub Notification of comment by dbaron
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/4055#issuecomment-505261959 using your GitHub account

Received on Tuesday, 25 June 2019 03:06:06 UTC