Donald Stufft added the comment:

Uploading always hits the backend servers and thus has the same logging as 
before

Merely switching to HTTPS only provides protections against passive attacks. 
You need verification to protect against active attacks (which are simple and 
easy to do as well). Like I said, not a bad move and I'd be in agreement on 
doing it but if the powers that be decide it's too big of a change it's not 
going to massively decrease the security.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue12226>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to