Removal of any signatures system

Posted Apr 12, 2018 21:36 UTC (Thu) by sumanah (guest, #59891)
In reply to: Removal of any signatures system by mikemol
Parent article: A new package index for Python

mikemol, thanks for the heads-up. That's not clear enough and we need to fix the docs. The signatures are available, but the API response does not specifically mention the signature filenames and the user has to concatenate a .asc suffix onto a filename to check whether that signature exists. So, we host the signatures but don't make it easy to retrieve them or check whether a particular release is associated with a signature or not. This is, I will admit, very inconvenient for people who want to check for signatures.