Bridge authority should sign its bridge networkstatus doc? Or maybe change format to v3-style vote?
Isis points out that Tonga doesn't sign its networkstatus-bridge documents.
See networkstatus_dump_bridge_status_to_file() in src/or/networkstatus.c for background.
In fact, it looks like it's writing out a sort of hybrid smear of various formats. And metrics has learned to read this hybrid smear.
Adding a signature here wouldn't make a huge difference, since Karsten sanitizes the documents before publishing them, so the signature wouldn't be in the public version (and would be wrong anyway). So it is really only a slight improvement over the current "ssh from one trusted machine to the other before processing" chain of custody.
Seems to me that if we're going to add a signature and make the various metrics tools adapt, maybe we should move to having Tonga write out a v3 style vote? Then we'd get various other updates for free (if there are any, I haven't investigated), and also the format would keep up-to-date (which makes it sound like a good thing -- "would keep changing" is the less fun way to say it).
Putting in Tor: unspecified since I don't even know if it's a good idea.