[Catalog-sig] hash tags

[Christian Heimes]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Am 08.03.2013 22:33, schrieb Donald Stufft:
> On Mar 8, 2013, at 4:28 PM, "M.-A. Lemburg" <mal at egenix.com>
> wrote:
> 
>> BTW: If we go with the CDN caching model for external files,
>> we'd pull the download page links directly on the /simple/ index 
>> page - as files, not external links.
> 
> We cannot download and rehost (even if we call it a cache) external
> files without getting permission from their owners to do so.

(CC to Van as this is a legal matter)

Would it be sufficient to add a checkbox to the administration section
of PyPI packages that say something like "I'm an owner of this package
and I grant PyPI the permission to rehost my stuff"?

Christian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQIcBAEBCAAGBQJROl07AAoJEMeIxMHUVQ1Fl38P/j5FKyg9C/QLODkOhzJlNeln
MkxUYYMx6iVc8GW1tU6eOw5NIChlgjXmFvL97VAJWLGcw+Crs9ChUyivABH4KPNm
nOxr/hXGTOlFrWahcvMvLthIRofNjTVNqphZNFDYApbdD8zGvilDxG0kvuPPom9K
RER4FIzk7KbkqSTQA7/Wg5Ekd1Cnw3mChkqwGcVfmYn/5ROWwa9h4bBwD0EiCCAn
RsmMWtfWIeP+94KroOKOHIdgnGhIvGyN5bkvixSeNkA1HZsxxdpzpF9ZQ5MhLavN
bxZbySXdaJfG9pyMQ2HtPOWnBfPWU0ywwDX+Q514Tjs68Jxpz5nUs3yPfFzuPdov
rONt9BAHyHQsbNpSNOfs6kULdfcNvrDoWiCKXoceUobQfSy5hpEkC7W8VwIU9Hp2
T0k4H63O3uk2pTTbQQM1fL5yiNcyhUSZEchnCadPRYTkxcifUZN6z3v3yLmGMYsL
HSns8aH1b21MVCn7mFQiQZcPl9gHUS97yAArrDfWtPw4UmMpfGcjJlriXsTRGN22
ZPyzts66ZupXR1eoKWPBTzFXVP337z0kyqUGE2VJDyuAGSM0NaNT38RJCiOd6RKz
CKGdIfwCUDj0c6PdXaVQH+SMefvL7/AnqJrGAB8FDNHx9Hr2reZF4qSuGx66VM8k
6vHvtXX8yuKkByOzhDQj
=I46J
-----END PGP SIGNATURE-----