search

w3c / css-houdini-drafts

Mirror of https://hg.css-houdini.org/drafts
https://drafts.css-houdini.org/
Other
1.84k stars 141 forks source link

[font-metrics-api] Potential fingerprinting vector? #736

Open xfq opened 6 years ago

xfq commented 6 years ago

https://drafts.css-houdini.org/font-metrics-api/

Will this spec allow enhanced fingerprinting of a user? Different rendering engines, different versions of a rendering engine, or a rendering engine running in different operating systems might render text slightly differently, even when the element being rendered use the same font family/face/size and have the same line-height.

See also: Fingerprinting Web Users Through Font Metrics

tabatkins commented 6 years ago

No more so than canvas already allows for the exact same reasons.

xfq commented 6 years ago

I see. Thanks. It would be useful to add a Security & Privacy section, and mention this.