[tbb-bugs] #13400 [Tor Browser]: Canvas Fingerprinting: fonts

[Tor Bug Tracker & Wiki]

#13400: Canvas Fingerprinting: fonts
-----------------------------+----------------------
     Reporter:  cypherpunks  |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  major        |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------

Comment (by mcs):

 Replying to [comment:5 gacar]:
 > Wouldn't it make sense to put the `measureText()` behind the canvas
 dialog until we get the bundled fonts ready? I thought this was the idea
 in [https://trac.torproject.org/projects/tor/ticket/13021 #13021] and I
 assume #13313 may take some time, though, dcf may have a better estimate.

 The reason I am not convinced that it is worthwhile to put measureText()
 behind the canvas prompt is that Kathy Brade and I were able to get
 similar fingerprinting results without using canvas at all (by getting the
 width of DOM elements like <span> that contain text).  We would be
 blocking one fingerprinting vector while leaving an (arguably) even easier
 one open.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13400#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online