Hacker News new | past | comments | ask | show | jobs | submit
Diti | on: Removing PGP from PyPI (2023)
Specifically, the CA signing the code certificates (that are valid for 10 minutes) is https://github.com/sigstore/fulcio.