[Distutils] PEP470, backward compat is a ...

Marius Gedminas marius at pov.lt
Fri May 16 22:13:53 CEST 2014


On Fri, May 16, 2014 at 07:12:01PM +0000, holger krekel wrote:
> On Fri, May 16, 2014 at 13:38 -0500, Carl Meyer wrote:
> > One option is Holger's solution: scraping the current links and
> > populating them as verified external links. We both don't like this
> > because it involves PyPI misleading users about the status of those
> > links, and you also don't like it because you want to deprecate verified
> > external links too.
> 
> Regarding the last bit, i indeed don't want to see the possibility removed
> to register external links-with-checksum.  PEP438 just introduced it and
> i think it's sufficient and efficient for allowing maintainers to host
> files externally while making it easy for end users choose to accept it
> along with a slight loss of reliability that "--allow-externals" might
> entail.  Integrity guruantees of such external links and pypi-uploaded
> files are strictly the same.

Well, not with MD5.

Marius Gedminas
-- 
It's my understanding that although in principle TCP can handle huge
throughputs in practice many stacks haven't been optimized for that case, so
you have to either use a utility which opens multiple TCP sessions in parallel
or do something really radical like upgrade to the latest version of the linux
kernel.
		-- Bram Cohen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: Digital signature
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20140516/1b9d6044/attachment.sig>


More information about the Distutils-SIG mailing list