diff --git a/pep-0458.txt b/pep-0458.txt index 8da3ebae987..f87a2886c51 100644 --- a/pep-0458.txt +++ b/pep-0458.txt @@ -108,6 +108,15 @@ of end-to-end signing. __ https://github.com/theupdateframework/tuf/tree/v0.11.1/tuf/client#updaterpy +Non-goals +========= + +This PEP does not eliminate any existing features from PyPI. In particular, it +does not replace existing support for GPG signatures. Developers can continue +to upload detached GPG signatures along with distributions. In the future, +PEP 480 may allow developers to directly sign TUF metadata using their GPG keys. + + PEP Status ==========