@hipsterelectron@circumstances.run
2025-08-19 15:51 UTC
@astraluma@tacobelllabs.net @pypi@fosstodon.org notable that a statistical argument was also used to remove support for pgp keys https://blog.pypi.org/posts/2023-05-23-removing-pgp/ even though the whole point of pgp is that using it does not require rendezvousing with a third-party service (because it is an anti-surveillance tool) so you cannot estimate the prevalence of its usage.
Replies (1)
-
@hipsterelectron@circumstances.run 2025-08-19 15:51
@astraluma@tacobelllabs.net @pypi@fosstodon.org very ironic that maintenance effort was described as a motivation for removing pgp support when pypi seems to only fund headcount for security and nothing for feature work. i have pip changes i've spent years responding to feedback on, that a pypi maintainer confirmed would significantly reduce pypi bandwidth costs, which have been difficult enough to pass through that i've basically given up on merging https://github.com/pypa/pip/issues/12921