Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PEP 480: Fix status, author, discuss, reference #1693

Merged
merged 2 commits into from
Mar 12, 2021

Conversation

brainwane
Copy link
Contributor

Move from Deferred to Draft status, update discussion venue and author list, and fix an obsolete reference to Distutils.

Signed-off-by: Sumana Harihareswara sh@changeset.nyc

@brainwane
Copy link
Contributor Author

brainwane commented Oct 27, 2020

Followup to #1681 to be reviewed by @mnm678 @trishankatdatadog @pfmoore and ideally @ncoghlan.

Also, the bit about PyPI users registering projects prior to uploading

peps/pep-0480.txt

Lines 380 to 395 in e2b198b

The following outlines an automated signing solution that a new developer MAY
follow to upload a distribution to PyPI:
1. Register a PyPI project.
2. Enter a secondary password (independent of the PyPI user account password).
3. Optional: Add a new identity to the developer's PyPI user account from a
second machine (after a password prompt).
4. Upload project.
Step 1 is the normal procedure followed by developers to `register a PyPI
project`__.
__ https://pypi.python.org/pypi?:action=register_form
Step 2 generates an encrypted key file (private), uploads an Ed25519 public key
to PyPI, and signs the TUF metadata that is generated for the distribution.

is now obsolete and needs to be updated before we can re-start deliberations on this PEP.

@brettcannon brettcannon requested a review from pfmoore October 28, 2020 16:59
pep-0480.txt Outdated Show resolved Hide resolved
pep-0480.txt Outdated Show resolved Hide resolved
pep-0480.txt Outdated Show resolved Hide resolved
@pfmoore pfmoore requested a review from dstufft October 28, 2020 17:27
@brainwane
Copy link
Contributor Author

Also, the bit about PyPI users registering projects prior to uploading

peps/pep-0480.txt

Lines 380 to 395 in e2b198b

The following outlines an automated signing solution that a new developer MAY
follow to upload a distribution to PyPI:
1. Register a PyPI project.
2. Enter a secondary password (independent of the PyPI user account password).
3. Optional: Add a new identity to the developer's PyPI user account from a
second machine (after a password prompt).
4. Upload project.
Step 1 is the normal procedure followed by developers to `register a PyPI
project`__.
__ https://pypi.python.org/pypi?:action=register_form
Step 2 generates an encrypted key file (private), uploads an Ed25519 public key
to PyPI, and signs the TUF metadata that is generated for the distribution.

is now obsolete and needs to be updated before we can re-start deliberations on this PEP.

@mnm678 if you want you could do that as a separate PR, or you could make a fresh review with a suggested replacement and I'll commit it into this PR.

@brainwane
Copy link
Contributor Author

(Further discussion on The Update Framework's mailing list, in case anyone is curious.)

@brainwane
Copy link
Contributor Author

@pfmoore @dstufft could this get a fresh review so we can update the authors? Thanks!

pep-0480.txt Outdated Show resolved Hide resolved
brainwane and others added 2 commits February 24, 2021 13:31
Move from Deferred to Draft status, update discussion venue and author
list, and fix an obsolete reference to Distutils.

Signed-off-by: Sumana Harihareswara <sh@changeset.nyc>
Co-Authored-By: Paul Moore <p.f.moore@gmail.com>
@brainwane
Copy link
Contributor Author

@dstufft I would appreciate if you could review this and #1711, please.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants