diff options
Diffstat (limited to 'docs/api.md')
| -rw-r--r-- | docs/api.md | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/docs/api.md b/docs/api.md index 7d7a563..019f9cf 100644 --- a/docs/api.md +++ b/docs/api.md @@ -248,8 +248,10 @@ who wrote what, until a remake drops the history ([`remakes.md`](remakes.md)). Every node signs changes it commits with its node key: an Ed25519 signature over the change's hash, kept beside the document. One signature vouches for more than its change: a node's change builds on its previous one, and a change's hash covers what it -builds on, so a signed change vouches for all the node's changes before it. So not -every change is signed, only those that +builds on, so a signed change vouches for all the node's changes before it, those it +builds on. No others: anyone can make a change under a node's actor, and one in the +place of a change of the node's the document holds is forged, refused as its sender's, +not the node's. So not every change is signed, only those that * touch protocol data (`_continuum`), * touch a path listed in `_continuum/access/signed` (within it, or above it), a list |