Read the official announcement on the PyPI blog as well! For the past year, we’ve worked with the Python Package Index (PyPI) on a new security feature for the Python ecosystem: index-hosted digital attestations, as specified in PEP 740. These attestations improve on traditional PGP signatures (which have been disabled on PyPI) by providing key […]

The post Attestations: A new generation of signatures on PyPI appeared first on Security Boulevard.

William Woodruff

Source: Security Boulevard
Source Link: https://securityboulevard.com/2024/11/attestations-a-new-generation-of-signatures-on-pypi/