We don't really use the alert mechanism, and many of the contributors to Bitcoin Core would like to remove it-- because the value it provides is very low, relative to the administrative overhead we receive in terms of people justifying non-starter proposals based on it (e.g. wanting to use it to remotely control miner default behaviour) or just the cost users have in reasoning about its security implications for them.
That said, there is very little potential for abuse, because if a bogus alert is sent a special alert can be sent that disables further use of the alert system erases all other alerts and sets a static alert key compromised message. As a result, active misuse is already effectively constructively disabled.
And all without fanning any extra drama.
While this might be true the question remains why someone who actively undermines the Bitcoin network, its devteam and community needs to hold said keys.
Leaving Gavin with the keys is like saying one could leave his car unlocked in a highly criminal neighbourhood because if a thief would be taking it, the police would stop him.
You lock the car so the thief can't drive away with it regardless of possible countermeasures!
Gavin tried a hostile takeover, mind you.
We're also talking about commit access so Gavin would have to take a harder route next time he would want to propose changes. Why does he even need commit access when he would propagate software outside the orderly routes? He doesn't need commit access to propagate his alternative software.
He also showed already how he would not care to hurt investors confidence and cost everyone involved massive amounts of time with his controversial proposals. He further showed he is unable to do teamwork so he is likely a burden for Bitcoin and the rest of the devs. He will very likely waste more time and hurt investors confidence further.
I think it makes a great deal of sense to make it harder for him to repeat these things on this or on another issue in the future.
If everyone of the core developers would behave in the way he does there wouldn't be a bitcoin after very short time. We do not want to support devs who try powergrabs and hostile takeovers. Why should be tollerate it? Why? One single reason, give me just one!
Basically for the amount of misconduct he has been showing lately he is holding far too much authority.
Also Hearn said on 'epicenter bitcoin' show he would like Gavin to revoke commit access for the other devs (
https://youtu.be/8JmvkyQyD8w?t=47m37s). I think this was an outrageous thing to say.
After we have been hearing this we do know with all certainty that Gavin definately holds too much authority over a software he actively attacked from the outside.
Gavin in my opinion has become a hazard for the productivity of the devteam and the coin itself and that's why we should think about taking keys and commit access away to prevent further issues.
Even if the alertkeys would be removed entirely Gavin would still remain a security issue and certainly cause more headache with the access that he has to github.
Again: his behaviour is unacceptable and can under no circumstances be tolerated because if we let him get away with this other devs would possibly repeat this aswelll as Gavin would too.
We can not tollerate an attemtpted hostile takeover by a core dev ever because if we would we'd certainly face more trouble later as this repeats and possibly intensifies and evolves into new directions. Gavin basically brings disorder to Bitcoin.
----------------
With all that said:
So far i can not identify new arguments or valid concerns against the proposal. Actually nobody seems to be able to justify why Gavin would need to hold the keys or have commit access.
Some people don't like the proposal but somehow almost no rational arguments were brought forward why he (and nobody else) needs to hold said keys or why he would need to have commit access.