On 03/16/2013 12:15 AM, Nick Coghlan wrote: > On 15 Mar 2013 16:16, "Carl Meyer" <c...@oddbird.net > <mailto:c...@oddbird.net>> wrote: >> >> tl;dr: I see your points, we'll change the PEP to allow clients to use >> hostnames instead of the rel attributes if they prefer. > > I will veto any such change. Clients MUST NOT assume that the > architecture of the index service will be limited to a single host name, > they must process the explicit metadata provided by the index that > indicates which hosts the index controls. > > Adding a "--trust-indices" flag to make this optional in setuptools > would be fine, but it seems perverse to trust every aspect of an index > *except* its claims to control additional hosts.
Ok, based on this I retract my earlier comment. I've pushed a minor update to the PEP (at https://bitbucket.org/hpk42/pep-pypi, not yet at python.org) to clarify explicitly that indexes may choose to host internal files on a separate host/domain. Carl
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Catalog-SIG mailing list Catalog-SIG@python.org http://mail.python.org/mailman/listinfo/catalog-sig
