PEP 458: Secure PyPI downloads with package signing

dstufft (Donald Stufft) February 12, 2020, 9:35pm 110

It looks like discussion about the actual meat and potatoes of this PEP has petered out. Unless someone has an objection, I intend to accept this PEP on Friday.

7 Likes

Topic		Replies	Views
RFC: improving pip security with package signing (PEP-458) Packaging	3	928	January 14, 2021
PyPI security work: multifactor auth progress & help needed Packaging	65	26383	September 23, 2022
PEP 480: Surviving a Compromise of PyPI: End-to-end signing of packages PEPs	6	2014	May 17, 2022
Interoperability concerns PyPI Q4 RFI	2	1012	September 19, 2019
PEP 458 current status and next steps (feedback requested) Packaging	7	1270	January 23, 2023

PEP 458: Secure PyPI downloads with package signing

Related Topics