HTTPS secured websites are vulnerable to traffic analysis that can expose legal, financial and even health information, a recent security shows.