Changes by Éric Araujo mer...@netwok.org:
--
resolution: - out of date
stage: - committed/rejected
status: open - closed
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue14280
___
Alexis Metaireau ale...@notmyidea.org added the comment:
If no MD5 checksum is present on the crawled simple index, then we don't have
to check them. This means we introduce a potential security hole here (md5
checksums were added for a reason).
What could be done is to explicitely don't
Jim Fulton j...@zope.com added the comment:
I just clarified that 14279 doesn't imply local files.
I'd be fine with a warning about lack of checksums for downloads.
--
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue14280
Alexis Metaireau ale...@notmyidea.org added the comment:
Right, I'll go for this then.
--
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue14280
___
Éric Araujo mer...@netwok.org added the comment:
I’m not sure that this report should not be merged with #14279, but Alexis will
judge that.
--
assignee: eric.araujo - alexis
title: simple indexes (in wrappers) should not require md5 hashes -
packaging.pypi should not require
