I highly recommend reading the explanation on how this is significant, it goes into more depth about timing attacks:

http://cr.yp.to/antiforgery/cachetiming-20050414.pdf