[mbrubeck]

There are trust metrics for web-of-trust systems that are resistant to attackers who can create unlimited dummy identities that trust each other. For example:

http://www.advogato.org/trust-metric.html