> On Feb 12, 2019, at 1:27 PM, Dustin Ingram <d...@python.org> wrote:
> 
> Most likely (someone more familiar with Warehouse could answer this) 
> Warehouse will select sha256 whenever it is available, so the simple API may 
> be just as good for you. But it's something to consider.
> 
> The simple API will always have the sha256 digest, for every file. 
> <https://github.com/pypa/warehouse/blob/04667bc20d5a8ab25062e64c5bd51eaf150ba532/warehouse/templates/legacy/api/simple/detail.html#L22>
>  
> 
> 

Important to note that while this is true for Warehouse, sha256 is not required 
by PEP 503 so if you specifically need sha256 you’re relying on an 
implementation detail of Warehouse.

--
Distutils-SIG mailing list -- distutils-sig@python.org
To unsubscribe send an email to distutils-sig-le...@python.org
https://mail.python.org/mailman3/lists/distutils-sig.python.org/
Message archived at 
https://mail.python.org/archives/list/distutils-sig@python.org/message/2XUNQYKDKWXGET2TA7RMGLJUSLMOMDEE/

Reply via email to