Log file Viewer

[14:57:58] <apollo13> dstufft: any objections against deprecating openid? it seems kinda pointless to login in pypi unless you are a package maintainer at which point you need a password for uploads via the cmd anyways?

[14:58:50] <dstufft> apollo13: I would love to kill it, we'd need a migration plan or something though.

[14:59:14] <apollo13> dstufft: the migration plan would be "mail users and tell them to set a password/username"? :D

[14:59:39] <dstufft> apollo13: seems like a reasonable plan :]

[14:59:54] <dstufft> I can get some numbers to see whwat use looks like

[14:59:56] <dstufft> in a few

[15:00:05] <apollo13> that would certainly help

[15:01:09] <ronny> peronally i#d rather see passwords go

[15:01:26] <ronny> instead openid login only, and upload only via tokens

[15:08:33] <apollo13> ronny: personally openid is dead imo

[15:09:27] <apollo13> most of the authentication stuff uses/missuses oauth nowadays imo

[15:09:40] <tdsmith> stackexchange and probably livejournal (!) are still providers i think but i'm not confident those services will stay live

[15:13:32] <gchristensen> I haven't heard anything about openid in well over a year until this morning.

[15:15:47] <dstufft> I think Federated auth is a bad idea unless you're a website who is tied to another website (e.g., if you're travis-ci, it doesn't make sense to have your own identity because it's all tied to github anyways) or you're a tiny site where the cost of creating an account would be overburdensome for your users (and even then, login as facebook/twitter/google/wahtever is likely to be a better option than OpenID)

[15:15:53] <dstufft> PyPI is neither of those things though

[15:16:17] <dstufft> (This is distinct from the idea of using Federated Auth as a means of SSO within an organization, like SO's primary use case for OpenID)

[19:45:21] <Wooble> hmm, why am I getting a separate .linux-x86_64.tar.gz sdist with the normal .tar.gz when I do setup.py sdist?

[19:46:49] <Wooble> err... nevermind, I'm dumb.