Damus
mleku · 1w
Retroactive disavowals And revocations are the same thing. If the authorising secretmisleaked then all bets are off
inkan profile picture
The logical structure of retroactive disavowals is completely different from that of delegations and revocations of signing authority.

A delegation declaration is a speech act that has an immediate automatic effect, i.e. to initialize a delegation relationship between two keys. It's like saying "With this ring I thee wed", which has the effect of initializing a marriage. And a revocation declaration is also a speech act with immediate automatic effect. It terminates the delegation relationship, just like putting a signature on the final divorce papers terminates the marriage. These speech acts are historical events with objective temporal placement, marking the exact beginning and the end of the relationship.

A retroactive disavowal of a signer key is a mere claim about the past, specifically about who used the signer key to sign certain events. You are saying that it wasn't *you* but *someone else* who used the key to sign these past events. This claim may be true or false, others have to look at the circumstances, any relevant evidence and your credibility and decide. This claim about the past does not bring into existence any new delegation relationship, and it does not terminate any delegation relationship.

One reason that Inkan works is that it cleanly separates the logic of delegation and revocation declarations from that of retroactive disavowals.