pesco/mixminion — comment on commit 37d21ebbb066b39aa300600f99ec610540185106
File:  line 0
By nmathewson:

The web interface aspect of this really doesn't make me happy; there have historically been way too many ways to trick somebody's web browser into giving you information that it has access to, through XSS or novel attacks.

Also, people tend not to realize how sensitive this stuff is. I bet a lot of folks would like to regularly put this info up on a website or something, so as to "show off" how "cool" their node was being. But the stats above actually leak a fair amount of subtle information! For example, you can use it to tell how many messages are padding, and how much of the link traffic is padding, which defeats the purpose of padding.

Honestly, I would be much happier if we could not do this at all, or turn it into something obviously safe, like a count of bytes-read/bytes-written, rounded to the nearest 64K, updated once every 6 hours.