Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.maint.python > #10361
| From | Donald Stufft <donald@stufft.io> |
|---|---|
| Newsgroups | linux.debian.maint.python |
| Subject | Re: the new PyPI, coming next month |
| Date | 2018-04-01 05:40 +0200 |
| Message-ID | <vzC0y-5ML-1@gated-at.bofh.it> (permalink) |
| References | <vzB4t-5b9-7@gated-at.bofh.it> <vzBQS-5JA-11@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
> On Mar 31, 2018, at 11:23 PM, Scott Kitterman <debian@kitterman.com> wrote: > > What replaces gpg for ensuring integrity of the uploaded code? To be clear, PGP signatures can still be uploaded and they are still available for download, they just don’t appear in the UI anymore. Longer term I’d *like* to get rid of PGP signatures, because I think their value here is actually pretty low. In that case they’d be replaced with TUF, but that’s a longer term project.
Back to linux.debian.maint.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
the new PyPI, coming next month Sumana Harihareswara <sh@changeset.nyc> - 2018-04-01 04:40 +0200
Re: the new PyPI, coming next month Scott Kitterman <debian@kitterman.com> - 2018-04-01 05:30 +0200
Re: the new PyPI, coming next month Donald Stufft <donald@stufft.io> - 2018-04-01 05:40 +0200
Re: the new PyPI, coming next month Dominik George <natureshadow@debian.org> - 2018-04-01 08:30 +0200
Re: the new PyPI, coming next month Donald Stufft <donald@stufft.io> - 2018-04-01 15:40 +0200
Re: the new PyPI, coming next month Sumana Harihareswara <sh@changeset.nyc> - 2018-04-01 05:50 +0200
Re: the new PyPI, coming next month Sumana Harihareswara <sh@changeset.nyc> - 2018-04-01 13:20 +0200
Re: the new PyPI, coming next month Sumana Harihareswara <sh@changeset.nyc> - 2018-04-03 15:40 +0200
csiph-web