PEP 458 now focuses on content security (rather than the current transport-only security) between PyPI and end users. PEP 480 builds on PEP 458 to also provide end-to-end security that can fully handle a compromise of PyPI.
Nick Coghlan