Re: API for SHA-256 fingerprints

Donald Stufft <[email protected]>
Newsgroups gmane.comp.python.distutils.devel
Message-ID <[email protected]>

> On Feb 12, 2019, at 1:27 PM, Dustin Ingram <[email protected]> wrote:
> 
> Most likely (someone more familiar with Warehouse could answer this) Warehouse will select sha256 whenever it is available, so the simple API may be just as good for you. But it's something to consider.
> 
> The simple API will always have the sha256 digest, for every file. <https://github.com/pypa/warehouse/blob/04667bc20d5a8ab25062e64c5bd51eaf150ba532/warehouse/templates/legacy/api/simple/detail.html#L22> 
> 
> 

Important to note that while this is true for Warehouse, sha256 is not required by PEP 503 so if you specifically need sha256 you’re relying on an implementation detail of Warehouse.

--
Distutils-SIG mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/distutils-sig.python.org/
Message archived at https://mail.python.org/archives/list/[email protected]/message/2XUNQYKDKWXGET2TA7RMGLJUSLMOMDEE/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.