Commenter emails and IP addresses are leaked through epoch-api

[cbergen]

The expectation of all commenters should be that their email address is never published. The epoch-api endpoint response includes that plus other unnecessary data and is easily accessible through a browser's developer tools.

[johndavidhunt]

This is a huge concern for us, we have been using Epoch for several years now. Aside from usual security concerns with this, (which are huge), there is also the concern that users cannot enter their comments anonymously if they so choose. Has any work been done on this yet? I can understand having this data available for the developer/owner of the website I suppose, but not accessible for the end user.

Please advise.