> Unless of course you find a way to map the timing and size of a pageload to its potentially sensitive content, in which case do tell.

Wasn't there a HN story about people doing exactly that to figure out what condition people were looking up on WebMD? I don't recall when.