Timing attack against HSTS to sniff browser history in Chrome and Firefox
Probably a good idea to edit the title to indicate that this is an example attack site as well, not my favorite thing in general to land on without warning.No js seems to mean no worries though.