[tor-bugs] #2187 [Torbutton]: Spoof Font List

[Tor Bug Tracker & Wiki]

#2187: Spoof Font List
-------------------------+--------------------------------------------------
 Reporter:  mt2009       |       Owner:  mikeperry
     Type:  enhancement  |      Status:  new      
 Priority:  major        |   Milestone:           
Component:  Torbutton    |     Version:           
 Keywords:               |      Parent:           
-------------------------+--------------------------------------------------

Comment(by mikeperry):

 Sadly, there are a lot of CSS capabilities that are bad for fingerprinting
 with more growing every day... We could toggle
 browser.display.use_document_fonts for this particular fingerprinting
 issue. I will accept a patch to do this, but I don't think the option
 should be on by default.

 I think the right way to do this is to figure out how to wrap the font
 engine so we can provide a reduced list, but since it is not an XPCOM
 component, this seems non-trivial from an XPI.

 Alternatively, this may be something that we need to fix in the Tor
 Browser Bundles, by specially building firefox to only search font paths
 that we provide.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2187#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online