From: Gareth Llewellyn <gareth@networksaremadeofstring.co.uk> To: tor-relays@lists.torproject.org Date: November 10, 2014 at 5:58:12 AM EST Reply-To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Node Operators Web Of Trust

On Fri, Nov 7, 2014 at 8:26 PM, grarpamp <grarpamp@gmail.com <mailto:grarpamp@gmail.com>> wrote: Is it not time to establish a node operator web of trust? Look at all the nodes out there with or without 'contact' info, do you really know who runs them? Have you talked with them? What are their motivations? Are they your friends? Do you know where they work, such as you see them every day stocking grocery store, or in some building with a badge on it? Does their story jive? Are they active in the community/spaces we are? Etc. This is huge potential problem.

I had an idea for this a little while ago; https://tortbv.link/ <https://tortbv.link/> using the published GPG signature in the contact info to sign the node fingerprint, if you trust the GPG key then you can _possibly_ trust that the node is run by the named operator.

Never got round to actually doing anything with it though...

_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Strikes me as a very good idea. Perhaps lawyers wielding attorney-client privilege could be used to protect the identities of those node operators who wish to remain anonymous. -- Spencer Rhodes, Esq. 126 East Jefferson Street, Orlando, Florida USA 32801-1830 t: +1.321.332.0407 | f: +1.321.332.0409 | m: +1.407.796.8282