On Tue, Oct 15, 2013 at 6:45 PM, Benjamin Smedberg
<benja...@smedbergs.us> wrote:
> On 10/15/2013 1:18 PM, Brian Smith wrote:
>> My understanding is that web content should not be able to tell which
>> locale the browser is configured to use, for privacy (fingerprinting)
>> reasons.
>
> I haven't heard this rule before. By default your browser language affects
> the HTTP accept-lang setting, as well as things like default font choices.
> You can certainly customize those back to a non-fingerprintable setting, but
> I'm not convinced that we should worry about this as a fingerprinting
> vector.

I think preventing fingerprinting at a technical level is something
we've lost though we should try to avoid introducing new vectors.

As far as JavaScript API features go, I don't think we should vary our
offering by locale. E.g. for Firefox OS we want changing locale to
just work and not require a new version of Firefox OS. The same goes
for a computer in a hotel or hostel or some such. Firefox should work
for each locale users might have set in Gmail.


-- 
http://annevankesteren.nl/
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to