Re: [Monotone-devel] Re: Re: Re: How will policy branches work?

[Zack Weinberg]

On Wed, Feb 6, 2008 at 10:50 AM, Jack Lloyd <address@hidden> wrote:
> > Anyone can, in
>  > their own database, substitute a permission set signed with their own
>  > private key which lists their own public key as having administrative
>  > rights.  But everyone else's database ignores that change because they
>  > only trust the original administrator, not the usurper.
>
>  Would this also be the path for dealing with a
>  our-project-leader-went-evil-on-us type of situation? Everyone (who
>  wants to trust some other admin instead) can import a packet with the
>  new admin key+signature blob in it, something along those lines?

Yup.  There was a lot of talk about scenarios like that at the summit.
 I think the discussions made it to the list, but I'm not sure.

zw