On Feb 10, 2013, at 02:44 PM, Nick Coghlan wrote:

>integrating TUF (https://www.updateframework.com/) into the PyPI based
>distribution infrastructure sounds like the best available option

And they've already done some amount of work for us.

https://www.updateframework.com/wiki/SecuringPythonPackageManagement

-Barry

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Catalog-SIG mailing list
Catalog-SIG@python.org
http://mail.python.org/mailman/listinfo/catalog-sig

Reply via email to