[Catalog-sig] V4 Pre-PEP: transition to release-file hosting on PYPI

[Carl Meyer]

On 03/16/2013 12:15 AM, Nick Coghlan wrote:
> On 15 Mar 2013 16:16, "Carl Meyer" <carl at oddbird.net
> <mailto:carl at oddbird.net>> wrote:
>>
>> tl;dr: I see your points, we'll change the PEP to allow clients to use
>> hostnames instead of the rel attributes if they prefer.
> 
> I will veto any such change. Clients MUST NOT assume that the
> architecture of the index service will be limited to a single host name,
> they must process the explicit metadata provided by the index that
> indicates which hosts the index controls.
> 
> Adding a "--trust-indices" flag to make this optional in setuptools
> would be fine, but it seems perverse to trust every aspect of an index
> *except* its claims to control additional hosts.

Ok, based on this I retract my earlier comment. I've pushed a minor
update to the PEP (at https://bitbucket.org/hpk42/pep-pypi, not yet at
python.org) to clarify explicitly that indexes may choose to host
internal files on a separate host/domain.

Carl

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20130317/97111111/attachment.pgp>