[Catalog-sig] A modest proposal for securing PyPI with TUF

[Justin Cappos]

> Speaking of which, it may be the case that our design document for
> integrating PyPI with TUF may not be terribly easy to understand. (After
> all, you do need to understand TUF first, but TUF is fairly easy once you
> understand its main ideas.) I plan to publish a friendlier document which
> introduce TUF at a very high-level and instead discuss more pragmatic
> issues (such as workflows).
>
>
Feel free to chime in if you'd rather see something else or want us to
focus on clarifying a specific topic.

Thanks,
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20130313/923aeeba/attachment.html>