Discussion of TAP 9: Mandatory metadata signing schemes about taps

[heartsucker]

There is one edge case here that was not discussed yet.

If the root wants to update its signing scheme, it has to generate a new key because there can only be one signature per key ID, and this would necessarily require duplicate signatures. It would, however, be possible if the root role in the new and old metadata has more keys than both thresholds.

[heartsucker]

Recommending we close this since it has been accepted.

[vladimir-v-diaz]

Closing TAP 9's discussion issue following its acceptance.