Yes , the user cannot click past itGood . Also while metadata can be useful , you are talking about timings , domain names , and amount of data . From that , the attacker can recover most of the information it needs . Who you talk to and when is almost as important as what you are saying to them . Do not underestimate the power of metadata . One can deduce a lot from that . Just one example imagine we can deduce the size of the downloaded web page because size is not a secret . How many web pages on this particular domain are exactly of this size ? Now imagine the user requests several such web pages . Hmm , he probably clicked through links . How about recovering the whole thing through a Markov chain analysis ? I bet you can recover a Wikipedia history like that . Yes , encrypting the web will help . But only by a tiny bit .