I’m personally fine with DNS, I mean relays rely on dns for example. But I don’t like the idea that something as important as what relays you’re using isn’t signed by you.

We could host the 10002 message signed as part of the webfinger file that nip-05 uses, or put them in a DHT.

It feels like DHT’s are less fragile and dependent on a service provider.