not sure how to do it in a decentralized way without spam though. seems like you would need a single or set of trusted relays with spam protections (ip banning) but at least you could switch away from those relays if it became corrupt?