Collected research

Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting

Leon Trampert, Daniel Weber, Lukas Gerlach, Christian Rossow and Michael Schwarz · NDSS Symposium

Script-less fingerprinting built from modern CSS. Container queries, arithmetic functions and complex selectors leak application, operating system and hardware details even where JavaScript is disabled, separating 97.95 percent of 1176 browser and OS combinations and working inside HTML email in 8 of 21 clients.

Record

Researcher

Leon Trampert, Daniel Weber, Lukas Gerlach, Christian Rossow and Michael Schwarz

Published by

NDSS Symposium

Topic

Browser

In the archive

• Collected in the 2025 research round

Related sources

• NDSS 2025 - Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting
• NDSS 2025 - Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting

Tags

• css
• email
• side-channel
• info-leak
• fuzzing
• measurement-study
• defence

This page is the archive's own catalogue record. The research is the work of Leon Trampert, Daniel Weber, Lukas Gerlach, Christian Rossow and Michael Schwarz, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.