nusenu / trustor-poc Goto Github PK

I've been doing some testing of ContactInfo, both dns-rsa and uri-rsa and the results are quite shockingly bad. A lot of the urls in relays with contactinfo don't even resolve.

1. Do you have the ContactInfo for any dns-rsa relays that you know are good? They should resolve with dig relayfp.domain.name TXT at least, even if it's not secure. I want to try testing them, but I haven't yet found a good one that resolves.
2. Should relays that provide a https:// url be considered bad if they use a self-signed cert?
3. Should relays that provide a https:// url be considered bad if they use an expired cert?

The problem I see if that people may look at a list of relays and presume that relays with a contact info are more reliable: e.g. https://github.com/nusenu/noContactInfo_Exit_Excluder

In fact, I'm getting the opposite feeling, that people who are running bad relays are putting up fake ContactInfo knowing this, and that the Tor project never validates the info.

And BTW, I think they're trolling you personally:

ERROR HTTP HEAD request failed for https://verification-for-nusenu.net/.well-known/tor-relay/rsa-fingerprint.txt [SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:1145)    
WARNING 4A69010FF36830D6949CA4456974E8585E920F4A did NOT VERIFY