3 ms·
The real snag comes from putting text into a canvas. Nobody can agree on what fonts they have installed, and of course there are all kinds of subtle variations
by db48x 4y ago
The real snag comes from putting text into a canvas. Nobody can agree on what fonts they have installed, and of course there are all kinds of subtle variations from one version of the “same” font to the next, and then everyone has different ideas about hinting, kerning, stem widths, etc, etc, etc. You can fingerprint basically everyone just from that information alone.
- magicalhippo 4y agoSure fonts and text is hard. But none of that is needed for basic surfing of the web.
- DoctorOW 4y agoEither there is a complete and total consensus on every aspect of rendering or there are differences in how <canvas> is rendered.
- magicalhippo 4y agoCiphers and hashes publish test data so you can ensure conformance. Don't see why, in principle, one couldn't do something similar with a stripped down <canvas>.
- db48x 4y agoIn that case you should use Firefox, and turn on “resistFingerprinting”. It’s not perfect, but it’s approaching real privacy.
- medstrom 4y agoOr the Arkenfox config (https://github.com/arkenfox/user.js https://github.com/arkenfox/user.js), which enables resistFingerprinting among other essentials. In this kind of game, a community config is exactly what you want.
- giancarlostoro 4y agoEvery browser can agree on a specific font if they truly cared about end-user privacy.