How does pypi know I'm not github? Because I can sign with my keys and not with github's key. Never mind all the low level details of the temporary keys and ha

How does pypi know I'm not github? Because I can sign with my keys and not with github's key. Never mind all the low level details of the temporary keys and hashes and all of that. This is an high level comment not a university book about security.