Timing attack against HSTS to sniff browser history in Chrome and Firefox
Probably a good idea to edit the title to indicate that this is an example attack site as well, not my favorite thing in general to land on without warning.<p>No js seems to mean no worries though.