[Python-Dev] Thoughts fresh after EuroPython

[Tarek Ziadé]

On Mon, Jul 26, 2010 at 1:20 PM, geremy condra <debatem1 at gmail.com> wrote:
> On Mon, Jul 26, 2010 at 4:02 AM, Tarek Ziadé <ziade.tarek at gmail.com> wrote:
>> On Sat, Jul 24, 2010 at 4:08 PM, Guido van Rossum <guido at python.org> wrote:
>
> <snip>
>
>>> Mirroring apparently also
>>> requires some client changes.
>>
>> Mirrors can be used as long as you manually point a mirror when using
>> them. We we are working on making the
>> switch automatic.
>
> I think we've talked briefly about this before, but let me reiterate
> that getting this right from a security point of view is quite a bit
> harder than it at first appears, and IMHO it is worth getting right.

FWIW, Martin has added a section about mirror authenticity in the PEP:

http://www.python.org/dev/peps/pep-0381/#mirror-authenticity



>
> Geremy Condra
>



-- 
Tarek Ziadé | http://ziade.org