[tbb-bugs] #16707 [Tor Browser]: Packaged fonts in Tor Browser make websites partly unreadable

[Tor Bug Tracker & Wiki]

#16707: Packaged fonts in Tor Browser make websites partly unreadable
-------------------------+-------------------------------------------------
     Reporter:  gk       |      Owner:  tbb-team
         Type:  defect   |     Status:  needs_review
     Priority:  normal   |  Milestone:
    Component:  Tor      |    Version:
  Browser                |   Keywords:  tbb-usability, tbb-fingerprinting-
   Resolution:           |  fonts, TorBrowserTeam201509R
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------
Changes (by arthuredelstein):

 * keywords:  tbb-usability, tbb-fingerprinting-fonts => tbb-usability, tbb-
     fingerprinting-fonts, TorBrowserTeam201509R
 * cc: mrphs (added)
 * status:  new => needs_review


Comment:

 After a lot of useful discussions we have decided to substantially expand
 the number of allowed system fonts for Windows and Mac. For Windows, I'm
 whitelisting a number of fonts that have been bundled with the OS since
 Windows Vista (2007). For Mac, I am whitelisting a variety of fonts that
 have been bundled with OS X since version 10.5 (aka Leopard, 2007).

 Both sets include a variety of Latin fonts as well as system-font coverage
 for CJK and a number of other writing systems. This approach has the
 advantage that it will look mostly familiar to users, and avoids adding
 the large Noto CJK font, which previously added ~12 MB to the download.
 Another nice thing is that the default chrome fonts have been whitelisted
 for both OSs (Segoe UI for Windows and Lucida Grande for OS X). Because we
 are using system fonts, it may be possible to distinguish different
 versions of the OS.

 Here are the patches to tor-browser.git and tor-browser-bundle.git:
 https://github.com/arthuredelstein/tor-browser/commit/16707
 https://github.com/arthuredelstein/tor-browser-bundle/commit/16707

 These versions can be downloaded for testing:
 https://people.torproject.org/~arthuredelstein/downloads/16707-builds/

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16707#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online