search

WICG / local-font-access

Web API for enumerating fonts on the local system
https://wicg.github.io/local-font-access
Apache License 2.0
75 stars 16 forks source link

mention additional fingerprinting surface in details of font versions #25

Closed dbaron closed 3 years ago

dbaron commented 4 years ago

From https://github.com/w3ctag/design-reviews/issues/400#issuecomment-530682291 :

A very brief comment here after looking at #399 -- it seems like there's less additional fingerprinting surface here -- but it's not zero, and worth mentioning. In particular, it seems like there are some changes in fonts that are not detectable on the web today, but would be detectable with raw font table access. Thus this might be providing the additional fingerprinting entropy to distinguish a user with version 1.0.4 of a font from one with version 1.0.5 of the same font in cases where that wasn't detectable today.

This seems worth at least briefly mentioning in the section on fingerprinting.