On Jul 24, 2013, at 10:38 PM, Richard Jones wrote:

> Hi all,
> 
> I've just been contacted by someone who's set up a new public mirror
> of PyPI and would like it integrated into the mirror ecosystem.
> 
> I think it's probably time we thought about how to demote the mirrors:
> 
> - they cause problems with security (being under the python.org domain
> causes various issues including inability to use HTTPS and cookie
> issues)
> - they're no longer necessary thanks to the CDN work
> 
> So, things to do:
> 
> - links and information on PyPI itself can be removed
> - tools that use mirrors still need to be able to but mention of using
> public mirrors is probably something to demote
> 
> These are just rough thoughts that occurred to me just now.

+1, as envoy of infrastructure team we would like to formally retire the 
[a-z].pypi.python.org names. Anyone with an existing mirror should be 
encouraged to continue maintaining it, but it will be for their own use (or the 
use of their company/internal network).

--Noah

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
Distutils-SIG maillist  -  Distutils-SIG@python.org
http://mail.python.org/mailman/listinfo/distutils-sig

Reply via email to