Live data from Hacker News

Blocking web fonts for speed and privacy (2016)

collinmbarrett.com

21–30 of 146 posts

Re: Blocking web fonts for speed and privacy (2016)

#21
post #10

>Additionally, most of the time web fonts are downloaded from a third-party delivery network such as Google Web Fonts or Adobe Fonts. One of the advantages of using these systems is that the likelihood that a visitor’s browser already has a font cached locally from a previous visit to any other site using the same font is relatively high. That likelihood is relatively low (though not as low as JS CDNs). Modern browse…

> Google Web Fonts library preloaded in it so that's just called installing fonts! I think the idea of web fonts is so that new fonts could be added and a user doesn't have to do something local to the browser. And this feature costs privacy. If people really understood the implications of loss of privacy, they would not want it. However, most people don't, and would gladly swap privacy for features (and then in the…

Yes, but if you install the entire font library locally then you have all those fonts in your system font picker, which you may or may not want. You also have to continue checking for new fonts or have sites that use them break. Having an extension do this for you is easier.

Also, there's no particular reason why webfonts need to cost privacy. The only reason to ever hotlink Google Fonts was to either...

- Accelerate load times (which is dubious)

- Be slightly easier to implement for lazy developers

Google Fonts are all freely licensed and specifically allow you to rehost them. All you have to do is download the TTFs and link to them in a @font-face declaration.

Adobe Fonts are the ones you can't self-host, because the actual CDN is a vehicle for calculating and charging a licensing fee. The privacy risk is deliberate, in this case - font owners need to know how many pageviews sites are getting so they can be charged the correct amount. Even then, this is something that could be done by having each site report their own usage statistics... except then the font vendors have to trust you, and they don't want to do that.

Re: Blocking web fonts for speed and privacy (2016)

#22

In a similar vein, LocalCDN is an extension to serve the most common javascript libraries from your browser instead of going to 3rd party servers, while there are edge cases when you use a local copy, I've rarely had an issue. https://codeberg.org/nobody/LocalCDN/ Removes integrity and crossorigin tags from embedded script and style elements to replace even more frameworks Font Awesome Google Material Icons jQuery Bo…

This will do nothing for websites that are built with bundlers, since the site-specific code will be in the same file making it unique. Probably still catches a good few though.

Re: Blocking web fonts for speed and privacy (2016)

#23
post #3

iOS' Lockdown Mode blocks web fonts. Sad to see how many sites still use icon fonts instead of SVGs.

As someone who knows nothing about this: what is wrong with icon fonts?

It’s a font, so it has to be loaded. SVGs can be inlined, so no additional, and possibly external, requests needed.

Re: Blocking web fonts for speed and privacy (2016)

#25
I have been doing this since years but many sites become unusable with FontAwesome blocked. For the time being, I manually unblock fonts on absolutely necessary websites. Any hints on how I can unblock only fonts from FontAwesome, preferably from ublock origin?

Re: Blocking web fonts for speed and privacy (2016)

#26
post #25

I have been doing this since years but many sites become unusable with FontAwesome blocked. For the time being, I manually unblock fonts on absolutely necessary websites. Any hints on how I can unblock only fonts from FontAwesome, preferably from ublock origin?

By domain or filename. Another reason to not use icon fonts.

https://github.blog/2016-02-22-delivering-octicons-with-svg/

Re: Blocking web fonts for speed and privacy (2016)

#27
post #10

Earlier quoted context omitted.

> Google Web Fonts library preloaded in it so that's just called installing fonts! I think the idea of web fonts is so that new fonts could be added and a user doesn't have to do something local to the browser. And this feature costs privacy. If people really understood the implications of loss of privacy, they would not want it. However, most people don't, and would gladly swap privacy for features (and then in the…

Yes, but if you install the entire font library locally then you have all those fonts in your system font picker, which you may or may not want. You also have to continue checking for new fonts or have sites that use them break. Having an extension do this for you is easier. Also, there's no particular reason why webfonts need to cost privacy. The only reason to ever hotlink Google Fonts was to either... - Accelerate…

on macos you can install fonts and put them in categories. so i can have a category called “web fonts”. anytime i wanna pick fonts in other apps i’ll just look through my favorite categories instead of the whole fonts book.

Re: Blocking web fonts for speed and privacy (2016)

#28
post #3

iOS' Lockdown Mode blocks web fonts. Sad to see how many sites still use icon fonts instead of SVGs.

As someone who knows nothing about this: what is wrong with icon fonts?

This is how some websites with icon fonts look when web fonts are disabled

https://0x0.st/oOUq.png (nullprogram.com)

https://0x0.st/oOUb.png (https://developer.android.com/training/basics/firstapp)

As someone has already pointed out, unlike web fonts, SVGs can be used as inline resources.

It's not just icon fonts though, using web fonts themselves can lead to bad design practices.

https://microblog.ayushnix.com/font-weight-insanity/

Re: Blocking web fonts for speed and privacy (2016)

#29

>Additionally, most of the time web fonts are downloaded from a third-party delivery network such as Google Web Fonts or Adobe Fonts. One of the advantages of using these systems is that the likelihood that a visitor’s browser already has a font cached locally from a previous visit to any other site using the same font is relatively high. That likelihood is relatively low (though not as low as JS CDNs). Modern browse…

This will not work for web fonts that are required license. For example, the commercial font served by MyFonts by Monotype. The license term clearly stated that every time when the font is loaded, the counting system increase and incurred a cost to the owner.

https://www.myfonts.com/collections/neue-helvetica-font-lino...

Re: Blocking web fonts for speed and privacy (2016)

#30
post #25

I have been doing this since years but many sites become unusable with FontAwesome blocked. For the time being, I manually unblock fonts on absolutely necessary websites. Any hints on how I can unblock only fonts from FontAwesome, preferably from ublock origin?

By domain or filename. Another reason to not use icon fonts. https://github.blog/2016-02-22-delivering-octicons-with-svg/

Agreed. It's been like 7 years since icon fonts were recommended and it's a real shame I still regularly see people do it today.
Post reply on HN