[Distutils] bandersnatch update

PJ Eby pje at telecommunity.com
Mon Apr 8 21:43:07 CEST 2013


On Sun, Apr 7, 2013 at 9:36 AM, Christian Theune <ct at gocept.com> wrote:
> The internal mechanisms of PEP 381 and the way that clients can authenticate
> the mirrored packages is not compatible with a partial mirror as the index
> pages are not generated but taken byte-by-byte so they can be verified with
> PyPIs cryptographic signature on them.

FWIW, those pages use relative URLs for PyPI-hosted packages, which
means you could serve those as a redirect in order to implement
partial mirroring, at least in theory. ;-)


More information about the Distutils-SIG mailing list