yossarian (1.3.6.1.4.1.55738)May 21, 2023

PGP signatures on PyPI: worse than useless

https://blog.yossarian.net/2023/05/21/PGP-signatures-on-PyPI-worse-than-useless

#programming #devblog #cryptography #rant #python #xp

PGP signatures on PyPI: worse than useless

Show threadJuan Luis
@yossarian Funny, just saw an example of this earlier today by @henryiii https://github.com/pypa/build/issues/561#issuecomment-1554751583
Onboard maintainers to the release process · Issue #561 · pypa/build

Our release process requires that maintainers have their PGP key listed in https://pypa-build.readthedocs.io/en/stable/installation.html, and preferably have their key signed by one of the other ma...

GitHub
May 22, 2023 at 4:42pmWeb