[Python-Dev] Signed packages

[martin at v.loewis.de]

> I'm surprised gpg hasn't been mentioned here.  I think these are all
> solved problems, most free software that is signed signs it with the
> gpg key of the author.  In that case all that is needed is that the
> cheeseshop allows the uploading of the signature.

For the record, the cheeseshop has been supporting pgp signatures
for about ten years now. Several projects have been using that for
quite a while in their releases.

Regards,
Martin