Re: [csswg-drafts] [css-fonts][css-fonts-4] CSS Fonts 4 needs a proper Security and Privacy Considerations section (#4697)

> But the attacker would get only a list of unique characters used in the page, not the actual text (and the list for any sufficiently big page would be close to an entire alphabet).

For most languages, yes. Specifically, this is an issue for Chinese, where knowing the 400 characters used in some text, out of the tens of thousands in the language does indeed pose a privacy risk.

-- 
GitHub Notification of comment by svgeesus
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/4697#issuecomment-589799821 using your GitHub account

Received on Friday, 21 February 2020 19:28:15 UTC