I saw this article at http://www.spidynamics.com/spilabs/education/articles/JS-search.html that says they can use CSS and JavaScript to determine what you have searched for. It is a pretty ingenious idea and I guess if used widely it could come up with some information but from the way I read it the bad guys would have to have a lot of different sites checking different key words or just be very lucky to get more than basic information. I will take the example of developer web sites. They might be able to determine very quickly that I do visit MSDN but not OTN. Beyond that there are so many different things I might search for that they would have to try a lot of different combinations to know if I searched for how to manually set up SSL encryption between 2 SQL Server 2000 servers or not. I don't see this as being something that they could use to figure out word by word what I search for but instead it could be used to see if I visit certain sites.