[csswg-drafts] css-color-adjust-1 "forced colours mode" re-introduces a privacy concern (#5548)

mallory has just created a new issue for https://github.com/w3c/csswg-drafts:

== css-color-adjust-1 "forced colours mode" re-introduces a privacy concern ==
I reviewed [css-color-4] and found that the deprecated systemcolors are necessarily back because of the use of forced colors mode. Even as per the current privacy and security considerations section of [css-color-adjust-1]:

Applying user color preferences via color schemes or forced colors mode expose the user’s color preferences to the page, which can increase fingerprinting surface.

It would be better if these were only available to the user-agent in order to do the color mapping.

[css-color-4] https://drafts.csswg.org/css-color-4/#deprecated-system-colors
[css-color-adjust-1] https://drafts.csswg.org/css-color-adjust-1/#privsec

Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5548 using your GitHub account

Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 24 September 2020 16:36:59 UTC