[Catalog-sig] Pull request to migrate PyPI to bcrypt

[Richard Jones]

I'm fairly confident that the discussion will conclude - or at least
reach a point that I can make a decision - by the time I wake up in
the morning.


     Richard

On 11 February 2013 21:06, Jesse Noller <jnoller at gmail.com> wrote:
> That's disappointing - Christian is correct
>
> On Feb 11, 2013, at 3:39 AM, Richard Jones <richard at python.org> wrote:
>
>> Given the discussion on the pull request I think I'll hold off. There
>> seems to be some question regarding its appropriateness which I'm not
>> really in a position to judge.
>>
>>
>>     Richard
>>
>> On 10 February 2013 21:57, Richard Jones <richard at python.org> wrote:
>>> Thanks, I'll be reviewing that tomorrow if Martin doesn't beat me to it.
>>>
>>>
>>>     Richard
>>>
>>> On 10 February 2013 14:26, Giovanni Bajo <rasky at develer.com> wrote:
>>>> Hi,
>>>>
>>>> I went ahead with an important task in my security design doc: migration of PyPI to bcrypt.
>>>>
>>>> This is the pull request:
>>>> https://bitbucket.org/loewis/pypi/pull-request/2/use-bcrypt-instead-of-unsalted-sha1/diff
>>>>
>>>> --
>>>> Giovanni Bajo   ::  rasky at develer.com
>>>> Develer S.r.l.  ::  http://www.develer.com
>>>>
>>>> My Blog: http://giovanni.bajo.it
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Catalog-SIG mailing list
>>>> Catalog-SIG at python.org
>>>> http://mail.python.org/mailman/listinfo/catalog-sig
>>>>
>> _______________________________________________
>> Catalog-SIG mailing list
>> Catalog-SIG at python.org
>> http://mail.python.org/mailman/listinfo/catalog-sig
>