The answer to having both visited styles and not security violations is to allow a domain to only style links that are local to that domain and not others. The

The answer to having both visited styles and not security violations is to allow a domain to only style links that are local to that domain and not others. They already do that with referers, there is a security level to only let the site see referers that are local to its domain. I think this is the default for https