-
-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Closed
Description
@mnm678 The section about PyPI users registering projects prior to uploading
Lines 380 to 395 in e2b198b
| The following outlines an automated signing solution that a new developer MAY | |
| follow to upload a distribution to PyPI: | |
| 1. Register a PyPI project. | |
| 2. Enter a secondary password (independent of the PyPI user account password). | |
| 3. Optional: Add a new identity to the developer's PyPI user account from a | |
| second machine (after a password prompt). | |
| 4. Upload project. | |
| Step 1 is the normal procedure followed by developers to `register a PyPI | |
| project`__. | |
| __ https://pypi.python.org/pypi?:action=register_form | |
| Step 2 generates an encrypted key file (private), uploads an Ed25519 public key | |
| to PyPI, and signs the TUF metadata that is generated for the distribution. |
is now obsolete and needs to be updated before or as we re-start deliberations on this PEP.
Originally posted by @brainwane in #1693 (comment)
Metadata
Metadata
Assignees
Labels
No labels