Re: [Monotone-devel] Re: Monotone Security

[Brian May]

William Uther wrote:
> Now let's imagine that Bob merges all heads in his database, but 
> without fully checking Charlie's change.  At this point, Bob signs the 
> newly merged revision.
This is where you need a distributed system for sending trust data (as 
discussed here as "policy branches"), so if Alice doesn't trust Charlie, 
Bob won't trust Charlie either.

Also, if Bob signs a merge, then he is essentially saying he trusts  
both versions, IMHO (although maybe this is questionable because the UI 
makes merges without reviewing the changes so easy). Then it shouldn't 
matter if Alice sees the merge result.

Brian May