4 ms·
New signatures cannot be uploaded to pypi https://blog.pypi.org/posts/2023-05-23-removing-pgp/ https://blog.pypi.org/posts/2023-05-23-removing-pgp/
by hiatus 3y ago
New signatures cannot be uploaded to pypi https://blog.pypi.org/posts/2023-05-23-removing-pgp/ https://blog.pypi.org/posts/2023-05-23-removing-pgp/
- LtWorf 3y agoThey email me at every upload telling me to stop sending them my archaic signature. It seems the focus now is more to keep the secrets on github and authenticate with those. https://discuss.python.org/t/2fa-usability-on-pypi-and-with-packaging-tools/38167/29 https://discuss.python.org/t/2fa-usability-on-pypi-and-with-...
- api 3y agoThe sheer amount of eggs in the GitHub basket is absolutely terrifying to me. If something happens to that thing, the entire computing world will halt. It reminds me a bit of what the journalism world did by becoming so reliant on Twitter for sourcing and communication, but in our case I think it's deeper and worse. We've hard coded GitHub into countless systems. I'd venture to say that most CI systems, package managers, build farms, etc. would break.
- LtWorf 3y agoDebian would keep working :D And at work my team uses a mirror on LAN. The other teams on the other hand…