DomainKey-Signature: a=rsa-sha1; c=nofws; d=toastin.space; h=subject:to
	:references:from:message-id:date:mime-version:in-reply-to
	:content-type:content-transfer-encoding; q=dns; s=ml; b=jvA6rJFq
	9t88nQfwPXRcxzPtkYBOTkG1QTAHJFzIY83sa9rxyhMJXeWyuPLgn0Cp0Yd9nua7
	l2cN/+F9221IMU3cLGEf1M4hD6D7TIEjGuGoz+3aLSNeFRfQwvY6d6PIlBiiB5kG
	xGLAuDzxYl3x9pmvP9mqYp4GjP7b+qv0gE1IL1blXnxiyhYSqQLpDYI2rSNiE0W5
	J7UA/mLJnUGyQFcGwC1spNhzzsoavOPbhm6XkMkZTTJYA787tjvNTjGRODwhpu28
	QaWPwF85gk0FuCU94tO2fft8/Xd6PjohkG5p7KRgiQcSRMLzPlonkvynGVQbPkbE
	/AHoW/FkB/mLgA==
Subject: Re: [alpine-devel] [RFC] New Governance Model
To: alpine-devel@lists.alpinelinux.org
References: <2a54dd89-9204-644f-6273-e5505d490e05@toastin.space>
 <20190410143631.7740d688@ncopa-desktop.copa.dup.pw>
 <d58b4a47-c6bf-e122-d02a-edc741271365@toastin.space>
 <20190411143119.644e3407@ncopa-desktop.copa.dup.pw>
 <144bcb8f-66fe-29ad-f18d-bc90779bdfa7@toastin.space>
 <20190411170006.6de52951@ncopa-desktop.copa.dup.pw>
From: Chloe Kudryavtsev <toast@toastin.space>
Message-ID: <8f113d00-a497-0337-8a3c-86512fde9cc6@toastin.space>
Date: Thu, 11 Apr 2019 11:29:19 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:67.0) Gecko/20100101
 Thunderbird/67.0
Precedence: list
MIME-Version: 1.0
In-Reply-To: <20190411170006.6de52951@ncopa-desktop.copa.dup.pw>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit

On 4/11/2019 11:00 AM, Natanael Copa wrote:
>> We should thus reword it as something like so:
>> "Base is the ultimate authority, and the rest of the project structure
>> exists [...]"
>> Would that be acceptable?
> 
> Would be better at least.

Okay, I'll patch it in later today (about to go out).

>> RE: patch ownership...
> 
> lets keep that discussion separated from this. Preferable at a
> different time.

Fair enough, just wanted it on record.

> No, I meant: what are those very few disadvantages of forced rotation?

Oh I see.
The disadvantages are such:
1. Elections have to be held, and have to be project-wide.
This is slow, and requires decent amounts of effort.
Thankfully, with how we have it set up, it only happens once a year, and 
is thus acceptable.
2. If the project is compromised (most project members do not have the 
project's best interests in mind), after 3 years the protection 
abilities of base also become compromised.
However, if the project is compromised, it's effectively already dead, 
this only accelerates that.


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---