Re: [Python-Dev] PEP 487 vs 422 (dynamic class decoration)

2015-04-05 Thread PJ Eby
On Sat, Apr 4, 2015 at 9:33 PM, Nick Coghlan wrote: > So actually reading https://gist.github.com/pjeby/75ca26f8d2a7a0c68e30 > properly, you're starting to convince me that a "noconflict" metaclass > resolver would be a valuable and viable addition to the Python 3 type > system machinery. > > The

Re: [Python-Dev] [python-committers] Do we need to sign Windows files with GnuPG?

2015-04-05 Thread Ben Finney
Steve Dower writes: > Nathaniel Smith wrote: > > And I suspect python-dev generally doesn't put much weight on the > > extra effort required (release managers have all been using gpg for > > decades, it's pretty trivial) > > I'm aware of this, but still don't see it as a reason to unnecessarily

Re: [Python-Dev] [python-committers] Do we need to sign Windows files with GnuPG?

2015-04-05 Thread Larry Hastings
On 04/05/2015 06:41 AM, Antoine Pitrou wrote: On Sun, 05 Apr 2015 01:06:01 -0700 Larry Hastings wrote: On 04/04/2015 08:21 PM, Nathaniel Smith wrote: (I guess you could call Larry or someone, read them a hash over the phone, and then have them create the actual gpg signatures.) By sheer coinc

Re: [Python-Dev] [python-committers] Do we need to sign Windows files with GnuPG?

2015-04-05 Thread Steve Dower
"One question, if you will - I don't think this was asked so far - is authenticode verifiable from Linux, without Windows? And does it work for users of WINE ?" I've seen some info suggesting that it's verifiable, but you do need to extract the cert and calculate the hash against less than the si

Re: [Python-Dev] [python-committers] Do we need to sign Windows files with GnuPG?

2015-04-05 Thread Antoine Pitrou
On Sun, 05 Apr 2015 01:06:01 -0700 Larry Hastings wrote: > > On 04/04/2015 08:21 PM, Nathaniel Smith wrote: > > (I guess you could call Larry or someone, read them a hash over the > > phone, and then have them create the actual gpg signatures.) > > By sheer coincidence, I believe Steve and I bot

Re: [Python-Dev] [python-committers] Do we need to sign Windows files with GnuPG?

2015-04-05 Thread Steve Dower
Nathaniel Smith wrote: > And I suspect python-dev generally doesn't put much weight on the > extra effort required (release managers have all been using gpg for > decades, it's pretty trivial) I'm aware of this, but still don't see it as a reason to unnecessarily duplicate process. > or see any

Re: [Python-Dev] [python-committers] Do we need to sign Windows files with GnuPG?

2015-04-05 Thread Larry Hastings
On 04/04/2015 08:21 PM, Nathaniel Smith wrote: (I guess you could call Larry or someone, read them a hash over the phone, and then have them create the actual gpg signatures.) By sheer coincidence, I believe Steve and I both live in the Seattle area...! //arry/