Re: PyPI/pip security: waiting for input
Donald Stufft <[email protected]> Mon, 11 Mar 2013 10:53:38 -0400
| Newsgroups | gmane.comp.python.catalog |
|---|---|
| Message-ID | <[email protected]> |
On Mar 11, 2013, at 10:52 AM, Daniel Holth <[email protected]> wrote: > Super impressed after reading all the TUF papers and comparing it to > my own feeble proposal, they had addressed a whole bevy of problems > that I hadn't even thought of - infinite-length download attacks, > server-asserted timestamps, quorum signatures, sophisticated trust > delegation, consistency of all the metadata all the time ... > _______________________________________________ > Catalog-SIG mailing list > [email protected] > http://mail.python.org/mailman/listinfo/catalog-sig Agreed, and they've been very helpful with questions when asked. ----------------- Donald Stufft PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA _______________________________________________ Catalog-SIG mailing list [email protected] http://mail.python.org/mailman/listinfo/catalog-sig
signature.asc
(application/pgp-signature, 841 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.19 (Darwin) iQIcBAEBAgAGBQJRPe/yAAoJEG48vOkzctz6z04QAKOsYzBxNiZwvIHXeZ+LXbpA /36gNseAmUAwyRluYRW/WstcnnF5a40NlS0LXAvtxch5pCDdyqmWWEh4r2NcUiL7 gUKi9pvBB/ERyvUTkSCLBc1vx/TnAKzUVNh+SpSnYUHmwItUdTHo84+zbjFuoh6h UvCMlVQh4xRrHJ1s6BxesL50OPorttf+A+i5MXCiONk+x+VfUf+nPnJqL1OheNFR Y6q43pM1s+piDGIaUQkwJVkcR7Mhu2tFMhSM14OdH7yCDxIOJaHPuYW6KI0XVmXW EYMEMy4KYw8BQ808Rys9JvDqS5hfgPs8zwy3QV/ofFUe6zUSTVmPQUo8iyyQVNKK HPPoDBn2BPGyX7GkBTwTfQ41quA9yHsRI9niDtBH5j3z7Vu1+IJowZ96LamRTETs qUYE3NuAwvJTbZ/Bx+P6ZANgnyjKxYWz2DzFl9LFXJ3c1qcmosmx4BxNIi7mql8L yIszdzxndebpYQ9CROnsGPNUnwBaws/oiZpme8d7Bu/cpH8cP7DAR5ivmFr5s6fj za+AztR1GT7XKslQszDxDitEMPVSHtxBA1RUf+qx5oHdZFMQstE4JYd3a4BwrDAY CErJXmfACyLSt2OKeOsDPswMI1hqiTqpcHJC90T0NOe/LDRsa9d04jXa7QpXQOoG AddpBjUMSPdGtRnqnHdk =6F+s -----END PGP SIGNATURE-----