[brookst]

Serving the same unique etag over both public internet and Tor is a catastrophic fail.

Probably good opsec to never even have the same machine serving both worlds, let alone the same web server and site config.