On Jan 2, 2015, at 11:14 AM, Vladimir Diaz <vladimir.v.diaz@gmail.com> wrote:

Thanks for the great feedback - Nick, Donald, Paul, and Richard (off-list).

I am totally fine with focusing on PEP 458 and applying the final coat of paint on this document.

There's a lot of background documentation and technical details excluded from the PEPs (to avoid turning the PEP into a 15+ page behemoth), but I do agree that we should explicitly cover some of these implementation details in PEP 458.  Subsections on the exact format of metadata, explanation on how metadata is signed, and how the roles are "delegated" with the library, still remain.  As Paul as indicated, terminology can also be improved so as to be more readable for "non-experts."

Let me know how we should collaborate on PEP 458 going forward.  Guido van Rossum made minor corrections to PEP 458, and requested we reflect his changes back to the version on Github.  We can either move hg.python.org/pep/pep-0458.txt to github.com/pypa or github.com/theupdateframework/pep-on-pypi-with-tuf.