<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">
<html><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>On 2014-11-07 16:08, Kevin de Bie wrote:</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<div dir="ltr"><span style="font-size: 13px; font-family: arial,sans-serif;">>With that in mind, he does raise a valid point. Are there any plans to move</span><br style="font-size: 13px; font-family: arial,sans-serif;" /><span style="font-size: 13px; font-family: arial,sans-serif;">>to a more decentralised model for the directory authorities? Are their any</span><br style="font-size: 13px; font-family: arial,sans-serif;" /><span style="font-size: 13px; font-family: arial,sans-serif;">>plans to move the power to blacklist nodes out of the hands of the Tor Project</span><br style="font-size: 13px; font-family: arial,sans-serif;" /><span style="font-size: 13px; font-family: arial,sans-serif;">>and into the hands of its users somehow.</span><br />
<div><span style="font-size: 13px; font-family: arial,sans-serif;"> </span></div>
<div><span style="font-family: arial,sans-serif;">This is pretty interesting point, but then i'm personally not really interested in having any control over the actual blacklist. I'd feel plenty comfortable with </span><span style="font-family: arial,sans-serif;">just insight into what is blacklisted, for what reason and if possible some evidence to support this reason. Giving control to "the people" isn't always a good thing either as even in TOR circles there'd be people that can't deal with having power on any level. Transparency</span><span style="font-family: arial,sans-serif;"> is probably the word I was looking for to use.</span></div>
<div><span style="font-size: 13px; font-family: arial,sans-serif;">I didn't fill in contact information on my fresh tor relay simply because the app I use doesn't allow me to. (my tor relay runs on an Ouya, therefore android) Regardless of the absence of contact information the reason I run the relay are in line with the reasons why TOR exists.</span></div>
<div><span style="font-size: 13px; font-family: arial,sans-serif;"> </span></div>
</div>
<div class="gmail_extra"><br />
<div class="gmail_quote">2014-11-07 22:35 GMT+01:00 Derric Atzrott <span><<a href="mailto:datzrott@alizeepathology.com">datzrott@alizeepathology.com</a>></span>:<br />
<blockquote class="gmail_quote" style="margin: 0 0 0 .8ex; border-left: 1px #ccc solid; padding-left: 1ex;"><span>> How does one establish trust online though? Trust is a very delicate thing. A<br /> > system such as this simply inherently has these challenges. Pretty sure that<br /> > is why the tor browser for example always uses https.<br /><br /></span>Indeed, both the centralised and decentralised systems that are currently in<br /> place have major issues. Within centralised systems like the Certificate<br /> Authority system we see corruption (have you seen their fees) and we must<br /> trust them to actually verify identities and to remain secure, something<br /> at least a few CAs have proven that they can't do. Then we also have to<br /> trust our vendors to provide default lists of CAs to trust that are in<br /> fact worth of our trust.<br /><br /> Within decentralised systems like PGP we have to worry about the network<br /> effect, and making sure that people understand what they are actually doing,<br /> again we worry about whether or not we can trust our friends, and whether or<br /> not we can trust their friends.<br /><br /> Trust is probably one of the hardest problems facing folks using the Internet.<br /><br /> With that in mind, he does raise a valid point. Are there any plans to move<br /> to a more decentralised model for the directory authorities? Are their any<br /> plans to move the power to blacklist nodes out of the hands of the Tor Project<br /> and into the hands of its users somehow.<br /><br /> I'm not exactly sure how either of those would be accomplished, but I'm sure<br /> there is a clever solution somewhere.<br /><br /> Thank you,<br /> Derric Atzrott<br />
<div class="HOEnZb">
<div class="h5"><br /> _______________________________________________<br /> tor-relays mailing list<br /><a href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a><br /><a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a></div>
</div>
</blockquote>
</div>
</div>
<br />
<pre>_______________________________________________
tor-relays mailing list
<a href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a>
</pre>
</blockquote>
<p>Trust can also be purchased indirectly. The operator you began trusting could hand over the keys for a price.</p>
</body></html>