[Catalog-sig] Fwd: readthedocs.org or packages.python.org?

[Jesse Noller]

On Feb 6, 2013, at 9:40 PM, martin at v.loewis.de wrote:

> 
> Zitat von Jesse Noller <jnoller at gmail.com>:
> 
>> I don't think we need to transfer the domain to the PSF, but it should definitely be hosted on our cluster at OSU
> 
> It should continue to live on the very same machine (i.e. PyPI)
> as it is now.
> 
> Regards,
> Martin
> 

It's user uploaded content we already know to be unsafe, that we're putting on a different domain. Why host it on the same box when we already know VM isolation reduces the attack surface of each VM?

It's not like the VMs are expensive.