- From: Dave Crossland <dave@lab6.com>
- Date: Sat, 19 Apr 2008 11:52:54 +0100
- To: "Paul Nelson (ATC)" <paulnel@winse.microsoft.com>
- Cc: www-style <www-style@w3.org>
On 19/04/2008, Paul Nelson (ATC) <paulnel@winse.microsoft.com> wrote: > > I can have a page that fills up the memory on > your machine and take a long time to download a lot of fonts Can I have a page that fills up the memory on your machine and takes a long time to download a lot of images? Yes. Has this been a real problem? No. > This is evil from a security point of view. Could be mitigated > by only downloading the font(s) used on the page that are > not already installed. If I install Ascender's "Liberation Sans," but a website modifies it and references it with @font-face also as "Liberation Sans," I will want to see the modified version in the page. If I use the UA "install font" functionality, the UA will have to ask me to rename the font (and have to go into the font's internal data structures to do so.) The HTTP server sending MD5 sums of its font and the UA making MD5 sums of installed fonts might work to speed things up, but might be too fragile. -- Regards, Dave
Received on Saturday, 19 April 2008 10:53:27 UTC