[Python-Dev] Signed packages

[Hynek Schlawack]

Am 23.06.12 14:03, schrieb martin at v.loewis.de:

>> I'm surprised gpg hasn't been mentioned here.  I think these are all
>> solved problems, most free software that is signed signs it with the
>> gpg key of the author.  In that case all that is needed is that the
>> cheeseshop allows the uploading of the signature.
> For the record, the cheeseshop has been supporting pgp signatures
> for about ten years now. Several projects have been using that for
> quite a while in their releases.

Also for the record, it’s broken as of Python 3.2. See
http://bugs.python.org/issue10571