[tor-bugs] #15846 [Onionoo]: Sign responses

[Tor Bug Tracker & Wiki]

#15846: Sign responses
-----------------------------+-----------------
     Reporter:  karsten      |      Owner:
         Type:  enhancement  |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Onionoo      |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------

Comment (by cypherpunks):

 two alternatives to achieve the same goal ([to some degree]
 verifiable/authentic historic oninoo data) that do not require changes to
 onionoo's code and are problably rather low effort and have an additional
 benefit (public archives):

 a) publish historic onionoo details documents on collector.tpo (or any
 other TLS-enabled tpo webserver)
 (prefered over option b)

 fetch onionoo data via an hourly cronjob, like
 {{{
 /usr/bin/curl -s --compressed localhost/details -o $output
 xz $output
 }}}

 Storage requirements for details documents (currently): 27MB/day (complete
 details documents of one day stored as tar.xz)

 That would allow everyone to use and verify (served via ht tps) historic
 onionoo data.

 Since (historic) DNS and AS/GeoIP data is also included this contains more
 then just descriptor data (in such a case it wouldn't make much sense to
 re-publish it on collector just in a different format).

 - con: requires ~820MB/month (but storage is cheap these days?)
 - pros:
  - almost no effort to "implement"
  - would ease features like a compass "timemachine" (historic lookups)



 b) publish hashes of historic onionoo details documents on collector.tpo

 - pro: requries almost no storage
 - con: depending on what time of the hour the details file has been
 fetched it might be hard to actually match/reproduce the provided hash
 even if both files are authentic

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15846#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online