This commit adds various updates to account for changes in PEP 458, including:
* updating the link to the Python glossary
* add definitions of distribution file, target files
* clarify ‘target files’ and ‘target metadata’
* Use BLAKE 2 instead of SHA-2 in filenames
* transaction process -> upload process
* update paper links to use the permanent links from theupdateframework.io
This commit also adds a few clarifications about the purpose
of this PEP, including adding an overview of the changes needed
to implement the PEP.
Signed-off-by: marinamoore <mnm678@gmail.com>
PEP 458 now focuses on content security (rather than the current
transport-only security) between PyPI and end users.
PEP 480 builds on PEP 458 to also provide end-to-end security
that can fully handle a compromise of PyPI.
Marina Moore
Trishank Karthik Kuppusamy
Sumana Harihareswara
Min ho Kim
Brett Cannon
Mariatta
Huang Huang
Serhiy Storchaka
Guido van Rossum
Nick Coghlan