My understanding of Tor is that proxy keys are shared in a gossip network, and that without access to that gossip network you're vulnerable to being sybil attacked. How does Lightnion solve this? Or am I misunderstanding Tor?
If the "walking onions" proposal gets maintstream (i.e. private retrieval of a consensus subset), we can hope for improvements (see https://gitweb.torproject.org/torspec.git/tree/proposals/300...).