Re: Surviving a Compromise of PyPI - PEP 458 and 480

Sumana Harihareswara <[email protected]> Fri, 20 Dec 2019 20:18:52 -0500

Newsgroups	gmane.comp.python.distutils.devel
Organization	Changeset Consulting
Message-ID	<[email protected]>

Earlier this year, Brett Cannon consulted with Donald and updated the 
status of PEP 458 to Deferred. https://github.com/python/peps/pull/931

The PEP status is now Draft again and the new proposed title is

"PEP 458: Secure transport independent download integrity for PyPI packages"

(see 
https://github.com/secure-systems-lab/peps/blob/c13384a4fac6822626abb7e09ab7f6143179820f/pep-0458.txt 
).

Current discussion is happening on Discourse:

https://discuss.python.org/t/pep-458-surviving-a-compromise-of-pypi/2648/

-- 
Sumana Harihareswara
Changeset Consulting
https://changeset.nyc
--
Distutils-SIG mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/distutils-sig.python.org/
Message archived at https://mail.python.org/archives/list/[email protected]/message/CICYGLMVXPNBFZVV7I33XBGCPGFYXKQC/