[Catalog-sig] [Draft] Package signing and verification process

[Donald Stufft]

On Tuesday, February 5, 2013 at 2:34 PM, Daniel Holth wrote:
> There is a well-engineered framework out there already: https://www.updateframework.com/wiki/SecuringPythonPackageManagement
> 
To my knowledge this depends on PyPI remaining uncompromised.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20130205/fff67dec/attachment.html>