On Thu, Mar 12, 2020 at 02:57:24PM +1100, James Ramsay wrote:

8. Jeff H: can we introduce a new type of object -- a "revoked blob" if you
will that burns the original one but also holds the original SHA in the ODB
??

9. Peff: what would this mean for signatures? New opportunity to forge
signatures.

Easy, you just quickly find a collision for that blob's sha1 and put 
that in place of the offending original. ;)

(Fully tongue-in-cheek.)

-K