Unless your website is small or uncontroversial, malicious traffic is a very real issue. For many webmasters it's a critical issue. Now consider that, from a we

Unless your website is small or uncontroversial, malicious traffic is a very real issue. For many webmasters it's a critical issue. Now consider that, from a webmaster's perspective, the more anonymous you are, the harder it is for us to distinguish you from this torrent of malicious traffic. I run a fairly decent sized website (perhaps not as big as Hacker News but comparable in scope and magnitude) and I'm frequently analysing traffic samples to determine ways to profile abusive behaviour. Traffic from TOR is usually in excess of 95% robotic and malicious. For me it's just a waste of time to allow any of it. (But I do, so long as your browser already has a valid authentication cookie generated outside of TOR.)