[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #2187 [Torbutton]: Spoof Font List
#2187: Spoof Font List
-------------------------+--------------------------------------------------
Reporter: mt2009 | Owner: mikeperry
Type: enhancement | Status: new
Priority: major | Milestone:
Component: Torbutton | Version:
Keywords: | Parent:
-------------------------+--------------------------------------------------
Comment(by mikeperry):
Sadly, there are a lot of CSS capabilities that are bad for fingerprinting
with more growing every day... We could toggle
browser.display.use_document_fonts for this particular fingerprinting
issue. I will accept a patch to do this, but I don't think the option
should be on by default.
I think the right way to do this is to figure out how to wrap the font
engine so we can provide a reduced list, but since it is not an XPCOM
component, this seems non-trivial from an XPI.
Alternatively, this may be something that we need to fix in the Tor
Browser Bundles, by specially building firefox to only search font paths
that we provide.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2187#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs