4 ms·
> Remote fonts can be used for tracking and fingerprinting Isn't it the reverse, local fonts can be used for fingerprinting? (There are some snags with remote
by dictum 7y ago
> Remote fonts can be used for tracking and fingerprinting
Isn't it the reverse, local fonts can be used for fingerprinting?
(There are some snags with remote fonts — rendering bugs/exploits — but they're not exactly low hanging fruit anymore)
EDIT: I see what you mean by tracking. If the fonts are loaded with a third party script, this is indeed a problem. If the font files are served by a third party directly (without some intermediate script), this could be remedied with an extension that strips headers. It would obviously run afoul of this only do one thing rule from Google, the company that once attached Google+ to its search results.
- vanadium 7y agoActually, my Creative Director and I have noticed some Google Fonts have changed over time, producing significant enough (read: negative) changes to the UI of clients’ experiences we have out there that we decided to start downloading and storing them locally to lock in state (and for perf, but that’s another topic). The average user who comes to the site once will never notice it, but we have. It wouldn’t surprise me if it were a hidden vector of some sort, but I haven’t put effort into digging into it.