[Catalog-sig] [Draft] Package signing and verification process

[Lennart Regebro]

On Thu, Feb 7, 2013 at 11:32 AM, Jesse Noller <jnoller at gmail.com> wrote:
> That tutorial would have to be amazingly easy, and GPG could never be a hard
> requirement. GPG is still annoying, clunky and painful enough that it would
> just become a nuisance and people would move elsewhere.

*Using* gpg should not be a requirement a least. installing it is OK,
I guess, as long as we can provide instructions on how to do so. But
to be honest the best would be if you can download pips installer and
run setup.py on it and it's done. If that means including gpg or some
library part of gpg or similar, then so be it.

But as mentioned, there might be other options.

//Lennart