this is complete bullshit and relies on a well trained AI, but users, websites and browser setups are too different for it to reliably work in the wild.

this is the whole fingerprinting overreaction all over again.

By measuring the manifestations, attackers can decrypt encrypted traffic

How ?

Even the research paper doesn’t appear to mention this (unless I missed something)