[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Node Operators Web Of Trust



Technically, you can try doing the oder way around: sign you PGP key with a private key of your tor node. Thus, you can prove, that you own the node.
 
10.11.2014, 13:58, "Gareth Llewellyn" <gareth@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>:
On Fri, Nov 7, 2014 at 8:26 PM, grarpamp <grarpamp@xxxxxxxxx> wrote:
Is it not time to establish a node operator web of trust?
Look at all the nodes out there with or without 'contact' info,
do you really know who runs them? Have you talked with
them? What are their motivations? Are they your friends?
Do you know where they work, such as you see them every day
stocking grocery store, or in some building with a badge on it?
Does their story jive? Are they active in the community/spaces
we are? Etc. This is huge potential problem.

I had an idea for this a little while ago; https://tortbv.link/ using the published GPG signature in the contact info to sign the node fingerprint, if you trust the GPG key then you can _possibly_ trust that the node is run by the named operator.

Never got round to actually doing anything with it though...
,

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

 
 
Vladimir Ivanov
 
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays