diff --git a/mercurial/localrepo.py b/mercurial/localrepo.py
index f0745da75056d91d15c8522cf042262a4c2cc936_bWVyY3VyaWFsL2xvY2FscmVwby5weQ==..ce9e231265c16a99882ec139ff31d9b941b8a9a0_bWVyY3VyaWFsL2xvY2FscmVwby5weQ== 100644
--- a/mercurial/localrepo.py
+++ b/mercurial/localrepo.py
@@ -798,7 +798,9 @@
         return self
 
     def publishing(self):
-        return self.ui.configbool('phases', 'publish', True)
+        # it's safe (and desirable) to trust the publish flag unconditionally
+        # so that we don't finalize changes shared between users via ssh or nfs
+        return self.ui.configbool('phases', 'publish', True, untrusted=True)
 
     def cancopy(self):
         # so statichttprepo's override of local() works