Protecting against sybil attacks without violating tor’s security guarantees seems impossible. Would love to see a proof or counter example.