Re:Timing attack against HSTS to sniff browser history in Ch...
by bzbarsky on Tuesday October 27, 2015 @12:00AM
(#10456244)
This used to be possible, but browsers put into place various mitigations: restricting which properties a :visited selector can affect, always computing both the visited and non-visited style to avoid timing attacks, etc. http://dbaron.org/mozilla/visited-privacy has a writeup describing the issues and the solutions that were adopted.
[ Parent
| on HN ]
There are no comments on this comment yet.