[detaro]

Why? Performance doesn't matter for that use-case. Maybe less features means more secure, on the other hand established projects (or even the basic HTTP implementations in other languages stdlibs) are probably better covered security-review wise. (edit: unless I missed it, it doesn't even check against directory traversal?)

[mirimir]

Yes, less attack surface is good. So is low resource usage.

I used to like tinyhttpd, but Debian dropped it, and I find it painful to build, so I use nginx now.