[Python-ideas] Signed eggs?

[Stefan Behnel]

Tim Lesher wrote:
> In all the current discussion on python-dev about improving eggs and
> setuptools in general, I don't think I've seen anything regarding
> digitally signed eggs or verifiable egg distribution.  Google doesn't
> seem to turn anything up, either.
> 
> Has anyone put any thought into this?

Well, you can sign all stuff that you upload to PyPI. It usually doesn't
get verified on installation, though.

Stefan