3 ms·

This is why Tor is centralized, so that they can take action like cutting out malicious nodes if needed. It’s decentralized in the sense that anyone can partici

This is why Tor is centralized, so that they can take action like cutting out malicious nodes if needed. It’s decentralized in the sense that anyone can participate by default.

notpushkin 8mo ago
> so that they can take action like cutting out malicious nodes if needed How does that work?
- cyphar 8mo ago
  While anyone can run a Tor node and register it as available, the tags that Tor relays get assigned and the list of relays is controlled by 9 consensus servers[1] that are run by different members the Tor project (in different countries). They can thus easily block nodes. [1]: https://consensus-health.torproject.org/ https://consensus-health.torproject.org/
  - flipped 8mo ago
    It's 10, not 9. And there are severe problems with having a total of 10 DA be the essential source of truth for whole network. It would be trivial to DDoS the DAs and bring down the Tor network or at the very least, disrupt it: https://arxiv.org/abs/2509.10755 https://arxiv.org/abs/2509.10755. It's the only complaint I have of the current state of Tor. Anyone should be able to run directory authority, regardless if you trust the operator or not (same as normal relays).
    - _yclj 8mo ago
      Anyone can. The DA code is open source and is used whenever you run a testnet. You can also run a DA on the mainnet - how do you think the 10 primary DAs exist? They're not 10 computers owned by a single organization - they're 10 mutually trusting individuals. However, most of the network won't trust you.
      - flipped 8mo ago
        [flagged]
    - michaelmrose 8mo ago
      Couldn't you A: Run your own network that trusts the existing plus whatever nodes you think ought to be and convince everyone that this is better if it is B: Run a node and convince others to trust yours so that eventually there is 11 then 12 and so forth?
  - notpushkin 8mo ago
    Interesting, thank you so much! Yeah, if those 9 really are independent entities, I’d say I don’t see many issues here.

This is why Tor is centralized, so that they can take action like cutting out malicious nodes if needed. It’s decentralized in the sense that anyone can participate by default.

notpushkin 8mo ago

> so that they can take action like cutting out malicious nodes if needed How does that work?

cyphar 8mo ago
While anyone can run a Tor node and register it as available, the tags that Tor relays get assigned and the list of relays is controlled by 9 consensus servers[1] that are run by different members the Tor project (in different countries). They can thus easily block nodes. [1]: https://consensus-health.torproject.org/ https://consensus-health.torproject.org/
- flipped 8mo ago
  It's 10, not 9. And there are severe problems with having a total of 10 DA be the essential source of truth for whole network. It would be trivial to DDoS the DAs and bring down the Tor network or at the very least, disrupt it: https://arxiv.org/abs/2509.10755 https://arxiv.org/abs/2509.10755. It's the only complaint I have of the current state of Tor. Anyone should be able to run directory authority, regardless if you trust the operator or not (same as normal relays).
  - _yclj 8mo ago
    Anyone can. The DA code is open source and is used whenever you run a testnet. You can also run a DA on the mainnet - how do you think the 10 primary DAs exist? They're not 10 computers owned by a single organization - they're 10 mutually trusting individuals. However, most of the network won't trust you.
    - flipped 8mo ago
      [flagged]
  - michaelmrose 8mo ago
    Couldn't you A: Run your own network that trusts the existing plus whatever nodes you think ought to be and convince everyone that this is better if it is B: Run a node and convince others to trust yours so that eventually there is 11 then 12 and so forth?
- notpushkin 8mo ago
  Interesting, thank you so much! Yeah, if those 9 really are independent entities, I’d say I don’t see many issues here.