Hacker News Reader

That's why the Web of Trust, or classic GNUPG key signing parties are a forgotten/ignored must have. Anyone can change and go rouge of course, but it's statistically less likely.

View on HN

If I understand gp correctly, the web of trust comes after finding these human nodes, and will not help you in the process.

It doesn't work for I2P due to its design, but for things like Nostr, it works well. Essentially, the goal is to build up a list of "known" reliable relays over time, while simultaneously blacklisting anyone who joins and proves to be unreliable relying on the statistic that collaborative individuals outnumber hostile ones in any sufficiently large cohort.

Of course, it's far from being 100% effective, but it mitigates the issue significantly.

Hostile entities generally have a lot of money they can use to perform a Sybil attack.

Sure, but can't break the trusted part of the network who can remain operational in that case, even if not really anonymous anymore.

Reply on news.ycombinator.com