3 ms·

Zooming basically changes the dimensions of the viewport as JS/CSS see it. Reapplying the zoom level would involve running the same CSS media queries and/or JS

Zooming basically changes the dimensions of the viewport as JS/CSS see it. Reapplying the zoom level would involve running the same CSS media queries and/or JS so that the website looks good at those dimensions. It's not just an "optical" zoom. But more directly, zooming can put you in very nonstandard width x height dimensions. Carrying those dims across different pages makes for an easy fingerprint which is probably why it's reset.

pdonis 4y ago
> Zooming basically changes the dimensions of the viewport as JS/CSS see it. I don't care what the website's JS/CSS says. At the end of the day the browser has a rendered canvas; I just want to zoom the canvas (and clip it at the window dimensions, providing scrollbars if necessary, if zooming makes it larger than the window dimensions). The browser shouldn't have to re-run anything to do that; zooming and clipping a canvas are graphics operations that have existed in computers for as long as there have been computers with graphics at all.
- olliej 4y ago
  When people increase their font size/zoom they generally don't want that - what you're describing is the default zoom on phones, etc which is different from increasing the page text size, and you'll note is typically about increasing undersized ui components rather than simply reading text. When people are in a browser and expanding the content they want the content reflowed - having to scroll to read the width of a line is super obnoxious, and makes reading text much harder. This is made even more frustrating when you recall that a lot of time the reason for zooming is to make things easier to read. There are very few times where the correct response to "increase the zoom" is simply an affine transform of the rendered content, from both a usability standpoint or from user intent.
  - pdonis 4y ago
    > When people are in a browser and expanding the content they want the content reflowed Even if this is the case, I don't see why the browser has to re-run anything from the website or tell the website anything. It can just do the reflow operation locally. Yes, the central data structure then is the DOM rather than a rendered canvas, but the DOM is still held locally.
    - slobotron 4y ago
      And JS can detect that and send it back to the server.
    - olliej 4y ago
      I’m not sure what you’re suggesting. Reflow and relayout is entirely local just as it is if you resize your window. What are you concerned is happening?
      - pdonis 4y ago
        > Reflow and relayout is entirely local just as it is if you resize your window. Then why does the zoom level reset itself to 100% every time I reload the page if I set privacy.resistFingerprinting = true? > What are you concerned is happening? I'm concerned that setting privacy.resistFingerprinting = true breaks a feature (that my browser remembers the zoom level for a given site so I don't have to reset it every time I reload that site) that should, as you say, be "entirely local".
        olliej 4y ago
        Ah ok, I see what's happening. The issue is not related to page loads, and layout behaviour is not impacting or causing differing load behavior. First we need to consider what the goal of fingerprinting a browser is, and subsequently how that is done. The goal is not just "track a user", it is "track a user without using any explicit storage", so no cookies, client storage, etc. So instead all that a fingerprinting service can do is read implicit data from the browser, and using a collection of that data construct a unique ID. Most data that you read will be the same across large numbers of browsers: user agents, installed fonts, etc so what you do is build up a signature from those properties that vary from the mean. If you query enough different properties that hope is that you can accumulate enough variation to create a unique (-enough?) identifier that persists for that user. Which gets us to your feature. The enormous majority of users have default zoom. So if your browser presents a different zoom level that provides a large amount of information to uniquely fingerprint you. Hence `privacy.resistFingerprinting = true` disables non-default zoom on load, because it's directly finger-printable. Does that make it more clear what's going on?

pdonis 4y ago

> Zooming basically changes the dimensions of the viewport as JS/CSS see it. I don't care what the website's JS/CSS says. At the end of the day the browser has a rendered canvas; I just want to zoom the canvas (and clip it at the window dimensions, providing scrollbars if necessary, if zooming makes it larger than the window dimensions). The browser shouldn't have to re-run anything to do that; zooming and clipping a canvas are graphics operations that have existed in computers for as long as there have been computers with graphics at all.

olliej 4y ago
When people increase their font size/zoom they generally don't want that - what you're describing is the default zoom on phones, etc which is different from increasing the page text size, and you'll note is typically about increasing undersized ui components rather than simply reading text. When people are in a browser and expanding the content they want the content reflowed - having to scroll to read the width of a line is super obnoxious, and makes reading text much harder. This is made even more frustrating when you recall that a lot of time the reason for zooming is to make things easier to read. There are very few times where the correct response to "increase the zoom" is simply an affine transform of the rendered content, from both a usability standpoint or from user intent.
- pdonis 4y ago
  > When people are in a browser and expanding the content they want the content reflowed Even if this is the case, I don't see why the browser has to re-run anything from the website or tell the website anything. It can just do the reflow operation locally. Yes, the central data structure then is the DOM rather than a rendered canvas, but the DOM is still held locally.
  - slobotron 4y ago
    And JS can detect that and send it back to the server.
  - olliej 4y ago
    I’m not sure what you’re suggesting. Reflow and relayout is entirely local just as it is if you resize your window. What are you concerned is happening?
    - pdonis 4y ago
      > Reflow and relayout is entirely local just as it is if you resize your window. Then why does the zoom level reset itself to 100% every time I reload the page if I set privacy.resistFingerprinting = true? > What are you concerned is happening? I'm concerned that setting privacy.resistFingerprinting = true breaks a feature (that my browser remembers the zoom level for a given site so I don't have to reset it every time I reload that site) that should, as you say, be "entirely local".
      - olliej 4y ago
        Ah ok, I see what's happening. The issue is not related to page loads, and layout behaviour is not impacting or causing differing load behavior. First we need to consider what the goal of fingerprinting a browser is, and subsequently how that is done. The goal is not just "track a user", it is "track a user without using any explicit storage", so no cookies, client storage, etc. So instead all that a fingerprinting service can do is read implicit data from the browser, and using a collection of that data construct a unique ID. Most data that you read will be the same across large numbers of browsers: user agents, installed fonts, etc so what you do is build up a signature from those properties that vary from the mean. If you query enough different properties that hope is that you can accumulate enough variation to create a unique (-enough?) identifier that persists for that user. Which gets us to your feature. The enormous majority of users have default zoom. So if your browser presents a different zoom level that provides a large amount of information to uniquely fingerprint you. Hence `privacy.resistFingerprinting = true` disables non-default zoom on load, because it's directly finger-printable. Does that make it more clear what's going on?