Hey, my point was not that SSL is not needed. By all means, convert the whole web to SSL! I was just trying to propose a way to make the PyPi repository somewh

Hey, my point was not that SSL is not needed. By all means, convert the whole web to SSL! I was just trying to propose a way to make the PyPi repository somewhat more secure by making sure the maintainer signs the packages. This increases security somewhat (for example, if the server is compromised) in addition to SSL.