[Catalog-sig] PyPI mirror key rollover

["Martin v. Löwis"]

> I have another suggestion,
> what about adding a new response header on https://pypi.python.org/serverkey ?
> 
> Like "X-Key-Rollover: some date"

That would be too flakey for several reasons. One reason is that tools
may not be able to cope with that format change, either. Plus, I can't
really promise that the key rollover happens at this very point. So
tools would have to check whether the key rollover actually happened.
If they do that, they could as well check whether it happened on every
sync, which in turn would be more expensive than necessary.

Regards,
Martin