Re: Surviving a Compromise of PyPI - PEP 458 and 480
Sumana Harihareswara <[email protected]> Wed, 12 Feb 2020 18:45:21 -0500
| Newsgroups | gmane.comp.python.distutils.devel |
|---|---|
| Organization | Changeset Consulting |
| Message-ID | <[email protected]> |
The revised PEP 458 is at https://www.python.org/dev/peps/pep-0458/ as "PEP 458 -- Secure PyPI downloads with package signing." Discussion has been proceeding on Discourse. BDFL-Delegate Donald Stufft wrote today https://discuss.python.org/t/pep-458-secure-pypi-downloads-with-package-signing/2648/110 : > It looks like discussion about the actual meat and potatoes of this PEP has petered out. Unless someone has an objection, I intend to accept this PEP on Friday. -- Sumana Harihareswara Changeset Consulting https://changeset.nyc -- Distutils-SIG mailing list -- [email protected] To unsubscribe send an email to [email protected] https://mail.python.org/mailman3/lists/distutils-sig.python.org/ Message archived at https://mail.python.org/archives/list/[email protected]/message/SCLJOBDLPHXRXHUJ34W6CD2KBNV6H5AA/