I explained this in a comment further up. I'll repeat here: It's just simple traffic analysis. A page load generates a certain number of request/responses. Eac

I explained this in a comment further up. I'll repeat here: It's just simple traffic analysis. A page load generates a certain number of request/responses. Each request and response is a specific size, and will be transferred in a specific order. You create a fingerprint of that and it doesn't matter if the page is opened via a plain http channel, or https, or over Tor, The fingerprint will be the same (almost).