From: Gareth Llewellyn <gareth@networksaremadeofstring.co.uk>Date: November 10, 2014 at 5:58:12 AM ESTReply-To: tor-relays@lists.torproject.orgSubject: Re: [tor-relays] Node Operators Web Of TrustOn Fri, Nov 7, 2014 at 8:26 PM, grarpamp <grarpamp@gmail.com> wrote:Is it not time to establish a node operator web of trust?
Look at all the nodes out there with or without 'contact' info,
do you really know who runs them? Have you talked with
them? What are their motivations? Are they your friends?
Do you know where they work, such as you see them every day
stocking grocery store, or in some building with a badge on it?
Does their story jive? Are they active in the community/spaces
we are? Etc. This is huge potential problem.I had an idea for this a little while ago; https://tortbv.link/ using the published GPG signature in the contact info to sign the node fingerprint, if you trust the GPG key then you can _possibly_ trust that the node is run by the named operator.Never got round to actually doing anything with it though...
_______________________________________________
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays