Tor2web Directory about tor2web HOT 1 OPEN

A chat on #tor-dev on some topics about the use of tor network with Sebastian:
naif
What do you think about that idea to "hook" a possible tor2web directory against the Tor Directory information using Name and Contact field, by enabling joining/leaving of the network not depending on DNS distribution, supporting multiple hosts and domains #41 ?
1:57
Sebastian
Last time I told you I don't like the idea to abuse tor dir information for that. What's new that should convince me?
1:58
naif
Sebastian: i tried to articulate the ticket more, including the need to discuss how/if/how-to-remedy about not hurting tor network
Sebastian: maybe identifying certain constraint of uses/deployment it may void the issues or "hurting the tor network" but rather "participating to the tor network" in an active way
Sebastian: for example being a relay and allocating at least X amount of bandwidth to relay activity
2:00
naif
Sebastian: that's just an example, would it make sense something like that? so, it would not be a "parasitic way" of just using the Tor Directory
Sebastian: but an active participation to the tor network
2:01
Sebastian
I think it's not smart to make a tor2web node be a relay just because you want to distribute some small strings. pastebin can do that with less overhead
2:02
naif
Sebastian: the fact is that tor allow you to leverage some existing trust mechanism of the network itself
Sebastian: using an external resource such as a pastebin would require probably tons of work to make a reasonable trust model, protecting against sibling attacks, for a tor2web networked mode
Sebastian: while most of that kind of problems has been already addressed by tor network
2:03
Sebastian
if you need to trust it, Tor doesn't help you at all.
but we did talk about that last time, too.
2:04
naif
Sebastian: sure, but i'd like to explore the various points/issues that could be there
Sebastian: running a tor relay on a tor2web node, if we implement a proper protocol multiplexer (like the ones made by kh3ops of telecomix), we can have tor relay listen on 443 port and also the tor2web node application proxy
2:05
Sebastian
ok. So, I think "it's a bad idea".
2:05
naif
Sebastian: so that when a user connect to a tor2web site, from a passive observator point of view, there's plausible deniability if he is connecting to a Tor Relay (SSL on port 443) or to a Tor2web exposed torhs (SSL on port 443)
2:06
Sebastian
that might actually work with an obfsproxy based https transport
2:07
naif
Sebastian: ah yes. However my meaning is that there are many complementary stuff that could be done by leveraging a) torhs b) tor-relay c) tor2web functionalities all together, it's not something to do tomorrow morning, but at least to articulate/research various risks/opportunities

from tor2web.