Re: [ft-devel] Potential Timing Side-channel in Freetype Library

[Werner LEMBERG]

>> The suggestion to load the script's Unicode block as a whole in
>> advance sounds like a good suggestion – for passwords and the like
>> you only need a single font at a single size, so this should be
>> manageable.  For CJK scripts and the like, the number of available
>> glyphs probably prevents easy password recognition anyway, I think.
>
> We think the idea of loading multiple glyphs is interesting.
> However, according to our understanding of the graphic libraries,
> the glyph caching is often performed by other libraries, (e.g. SKIA
> on Android).  It's unclear if we do this for Freetype, what would be
> the impact of other libraries that uses Freetype.

I don't see any impact.


    Werner