From 018c019d56f4d237901c9910c3d294b1bfb09f6d Mon Sep 17 00:00:00 2001 From: Sumana Harihareswara Date: Wed, 4 Dec 2019 15:09:37 -0500 Subject: [PATCH 1/2] PEP 458: Change title to clarify intent Per conversation in https://discuss.python.org/t/pep-458-surviving-a-compromise-of-pypi/2648/21 about problems with current title, and and per former PEP coauthor Vladimir Diaz in https://mail.python.org/archives/list/distutils-sig@python.org/thread/TXM2O34TMSHH5U6WA2IF7XKO5J3G5NQQ/#3QLN4KECII6KULKYXS7U4CVBEPGK4B6S Signed-off-by: Sumana Harihareswara --- pep-0458.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pep-0458.txt b/pep-0458.txt index 85707d7628c..e0190d3df74 100644 --- a/pep-0458.txt +++ b/pep-0458.txt @@ -1,5 +1,5 @@ PEP: 458 -Title: Surviving a Compromise of PyPI +Title: Securing the Link from PyPI to the End User Version: $Revision$ Last-Modified: $Date$ Author: Trishank Karthik Kuppusamy , From 0c1eef83afe1ded4c73528c2b9429f7a371c890b Mon Sep 17 00:00:00 2001 From: Sumana Harihareswara Date: Thu, 5 Dec 2019 09:10:06 -0500 Subject: [PATCH 2/2] PEP 458: Improve title Change "link" which misleadingly implied transport level security. Signed-off-by: Sumana Harihareswara --- pep-0458.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pep-0458.txt b/pep-0458.txt index e0190d3df74..31bb2a3b1e6 100644 --- a/pep-0458.txt +++ b/pep-0458.txt @@ -1,5 +1,5 @@ PEP: 458 -Title: Securing the Link from PyPI to the End User +Title: Secure PyPI downloads with package signing Version: $Revision$ Last-Modified: $Date$ Author: Trishank Karthik Kuppusamy ,