>I thought that browser venders we're having the :visited selector lie to you when you call getComputedStyle on them? It's possible to probe the users history

>I thought that browser venders we're having the :visited selector lie to you when you call getComputedStyle on them? It's possible to probe the users history even though getComputedStyle doesn't give it away anymore. See page 6 of this article: http://www.contextis.com/documents/2/Browser_Timing_Attacks.pdf http://www.contextis.com/documents/2/Browser_Timing_Attacks.... Obviously turning off Javascript prevents these types of things to some extent, but even then there are ways: https://www.nds.rub.de/media/nds/veroeffentlichungen/2014/07/09/DSN_paper.pdf https://www.nds.rub.de/media/nds/veroeffentlichungen/2014/07... The web is just not designed with preventing information leaks in mind.