Re: [csswg-drafts] [css-fonts] incorporate mitigations for font based fingerprinting (#4055)

Based on @litherum comments, my two cents here is that we should instead do the following:
> User Agents must limit the exposure of system fonts to protect user privacy. The exact mechanism through which this is done is left at the discretion of User Agents.
> 
> To achieve this, User Agents should collect telemetry about fonts supported by their users. One way to prevent installed fonts to leak information about the user would be to cross-reference this telemetry data with their installed languages and operating system version, and not expose to the web the fonts which are not commonly supported in any of the [ OS-Version x Installed Language ] buckets that the user is part of. 

-- 
GitHub Notification of comment by FremyCompany
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/4055#issuecomment-505380855 using your GitHub account

Received on Tuesday, 25 June 2019 10:14:57 UTC