Some questions about the hostlist

[Guilherme Macedo]

Hey!

I've a few questions about how the hostlist works, after reading the handbook 
and looking into the source code.

Why the hostlist is tied to a specific versioned subdomain - 
http://v14.gnunet.org/hostlist ?
Could it be made generic like https://gnunet.io/hostlist ?Every time that it's 
updated, it also requires the handbook to be updated too.
Why it's served through plain http?
The file doesn't seem to be signed, so how can the network protect itself from 
malicious or rogue nodes?
Is the validation being done in some code besides 
https://git.gnunet.org/gnunet.git/tree/src/hostlist ?
What is the purpose of fulcrum.net.in.tum.de in 
https://git.gnunet.org/gnunet.git/tree/src/hostlist/hostlists_learn_peer2.file ?
Who curates the hostlist?
I'm asking because there is a difference between the hosts available in 
http://v14.gnunet.org/hostlist and https://gnunet.io/hostlist .

Appreciate if someone could point to me specific section in the handbook or in 
the source code that I might have missed, please.

Best regards.

Guilherme Macedo