On Thu, Feb 13, 2014 at 5:59 AM, Benjamin Smedberg <benja...@smedbergs.us>wrote:
> One of the things I would like us to consider (in both Gecko and Servo) is > to stop using any available platform fonts by default. We should keep a > list of normal system fonts and only use those. If a site wishes to use > other fonts, they can use web fonts to supply them. This would reduce font > fingerprinting privacy attacks and at the same time eliminate the font > enumeration paths at startup which are expensive. > I agree this is worth exploring. The massive uptake of Web fonts has made this an easier step to take. I think it might still be a difficult step to take in Gecko, because it will regress some use-cases for a small number of users. E.g., a user uses an obscure language not supported by fonts in their standard OS install (e.g. Windows XP), and has installed or will install a local font to cover that language. So it requires some thought and probably telemetry. For Servo, I would pull the font.name prefs from all.js to get a fixed list of per-language font names to use for fallback and default fonts, and not implement platform font lists for now and hopefully not ever. Rob -- Jtehsauts tshaei dS,o n" Wohfy Mdaon yhoaus eanuttehrotraiitny eovni le atrhtohu gthot sf oirng iyvoeu rs ihnesa.r"t sS?o Whhei csha iids teoa stiheer :p atroa lsyazye,d 'mYaonu,r "sGients uapr,e tfaokreg iyvoeunr, 'm aotr atnod sgaoy ,h o'mGee.t" uTph eann dt hwea lmka'n? gBoutt uIp waanndt wyeonut thoo mken.o w _______________________________________________ dev-servo mailing list dev-servo@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-servo