7 ms·
Removing security features that don't work is a separate concern from making security features that do work. Nobody who has done any serious work on PyPI securi
by donaldstufft 3y ago
Removing security features that don't work is a separate concern from making security features that do work. Nobody who has done any serious work on PyPI security in the past 15 years thinks that GPG will play a part in the future of PyPI security. It's support was entirely vestigial, served no practical purpose, and never would.
- 7to2 3y ago[flagged]
- gerikson 3y agoNote that the person you're replying to is the PyPi maintainer responsible for removing GPG from PyPi. The rationale is expanded here: https://news.ycombinator.com/item?id=36050190 https://news.ycombinator.com/item?id=36050190
- dang 3y agoPlease make your substantive points without swipes, in keeping with the site guidelines: https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html. If someone else is wrong, it suffices to neutrally explain to them, and the rest of us, how they are wrong. Adding putdowns not only doesn't help, it harms the community and discredits your point, so please don't do that. Edit: please see https://news.ycombinator.com/item?id=36092913 https://news.ycombinator.com/item?id=36092913 also. You broke the site guidelines badly in this thread.