[Catalog-sig] PyPI reverse download

["Martin v. Löwis"]

>> Any objections?
> 
> Seems like this is rife for abuse -- it's essentially an open relay
> for POST requests, so I could use it to amplify a DDOS attack. So
> probably sounds like there needs to be some sort of security, or
> whitelist of allowed URL (or prefixes?), or somesuch.

I guess I restrict it to posting to *.python.org, then.

Thanks,
Martin