Django가 고장날때까지

출처:https://blog.trailofbits.com/2024/11/14/attestations-a-new-generation-of-signatures-on-pypi/ Attestations: A new generation of signatures on PyPIFor the past year, we’ve worked with the Python Package Index (PyPI) on a new security feature for the Python ecosystem: index-hosted digital attestations, as specified in PEP 740. These attestations improve on traditional PGP signatures (which have ..

AbstractRationale and MotivationDesign ConsiderationsPrevious WorkPGP signaturesWheel signaturesSpecificationUpload endpoint changesIndex changesSimple IndexJSON-based Simple APIAttestation objectsAttestation statement and signature generationProvenance objectsChanges to provenance objectsAttestation verificationSecurity ImplicationsCryptographic agility in attestationsIndex trustRecommendations..