[Catalog-sig] Pull request to migrate PyPI to bcrypt

[Giovanni Bajo]

On what? On using bcrypt with 1ms computation time? Or on the migration path? Those are the two issues at discussion.

Il giorno 11/feb/2013, alle ore 11:06, Jesse Noller <jnoller at gmail.com> ha scritto:

> That's disappointing - Christian is correct 
> 
> On Feb 11, 2013, at 3:39 AM, Richard Jones <richard at python.org> wrote:
> 
>> Given the discussion on the pull request I think I'll hold off. There
>> seems to be some question regarding its appropriateness which I'm not
>> really in a position to judge.
>> 
>> 
>>    Richard
>> 
>> On 10 February 2013 21:57, Richard Jones <richard at python.org> wrote:
>>> Thanks, I'll be reviewing that tomorrow if Martin doesn't beat me to it.
>>> 
>>> 
>>>    Richard
>>> 
>>> On 10 February 2013 14:26, Giovanni Bajo <rasky at develer.com> wrote:
>>>> Hi,
>>>> 
>>>> I went ahead with an important task in my security design doc: migration of PyPI to bcrypt.
>>>> 
>>>> This is the pull request:
>>>> https://bitbucket.org/loewis/pypi/pull-request/2/use-bcrypt-instead-of-unsalted-sha1/diff
>>>> 
>>>> --
>>>> Giovanni Bajo   ::  rasky at develer.com
>>>> Develer S.r.l.  ::  http://www.develer.com
>>>> 
>>>> My Blog: http://giovanni.bajo.it
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> _______________________________________________
>>>> Catalog-SIG mailing list
>>>> Catalog-SIG at python.org
>>>> http://mail.python.org/mailman/listinfo/catalog-sig
>>>> 
>> _______________________________________________
>> Catalog-SIG mailing list
>> Catalog-SIG at python.org
>> http://mail.python.org/mailman/listinfo/catalog-sig



-- 
Giovanni Bajo   ::  rasky at develer.com
Develer S.r.l.  ::  http://www.develer.com

My Blog: http://giovanni.bajo.it





-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4346 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20130211/fee2e9b0/attachment.bin>