From: Anthony Baxter

...

...

...

"Moore, Paul" wrote From: Michael T. Babcock Would it be worthwhile to stipulate that anyone who wants to submit a package to an automated distutils system have a PGP/GPG key signed by an appropriate Python authority or another developper?

...

-1. The effect would be to bar new submitters, who wouldn't have the necessary signed key, as well as to people like myself who can't be bothered trying to maintain a PGP key.

It should be at least an option, anyway.

Optional's certainly OK. It's really the "signed by an ... authority" bit that seems draconic. Paul