# PEP 458: Secure PyPI downloads with package signing

**URL:** <https://discuss.python.org/t/pep-458-secure-pypi-downloads-with-package-signing/2648>\
**Category:** PEPs\
**Created:** [November 12, 2019, 11:36pm UTC](https://discuss.python.org/t/pep-458-secure-pypi-downloads-with-package-signing/2648 "2019-11-12T23:36:53Z")\
**Posts on this page:** 1\
**Showing post:** 115

<div class="post-metadata">

**Author:** ![dstufft](https://sea2.discourse-cdn.com/flex002/user_avatar/discuss.python.org/dstufft/32/23_2.png) [@dstufft](https://discuss.python.org/u/dstufft)\
**Post date:** [February 15, 2020, 5:44am UTC](https://discuss.python.org/t/pep-458-secure-pypi-downloads-with-package-signing/2648/115 "2020-02-15T05:44:58Z")

</div>

While I recognize that the title of the PEP could possibly be improved upon, it appears that nobody has any concerns with the actual _content_ of the PEP. Given that, I’m happy to provisionally accept the PEP at this point, if someone comes up with a better wording for the PEP title I think it would be fine to adjust it, but I also think we do not need to delay the PEP any further while that potentially happens.

I won’t be able to update the PEP repository myself at the moment, but I’m sure someone can, so feel free to consider this an official announcement.

---

_[View the full topic](https://discuss.python.org/t/pep-458-secure-pypi-downloads-with-package-signing/2648)._