Uncovering Tor Hidden Service with Etag

  • Serving the same unique etag over both public internet and Tor is a catastrophic fail.

    Probably good opsec to never even have the same machine serving both worlds, let alone the same web server and site config.