Brave Fingerprint very unique

[Justin-CB]

Brave Nightly on OS X 10.14 has a fingerprint with at least 17.96 bits of identifying information(according to panopticlick). This is just 0.01 bit less than the release version of Google Chrome on the same platform. To reduce this, it might help to spoof/hide the plugin details and exclude some fonts for reduced entropy.

[Justin-CB]

Firefox & Brave

Chrome & Brave

I know that the Nightly build's UA gives more info. b/c it's 1 ver. ahead, which is less used. That might just be the price to pay for using a testing version. Also, it might make sense to map languages to the most common online variant: for example mapping en-AU, en-GB, and en-US to en-US, or mapping es, es-419, and es-ES to whichever one is the most common.

[bsclifton]

cc: @diracdeltas @fmarier

[fmarier]

Indeed, we have a similar issue to reduce our fingerprintability using fingerprint.js 2 and one specifically for fonts.

We're also considering spoofing some values that can't be removed / hard-coded.

Thanks for sharing the panopticlick results!