How does pypi know I'm not github? Because I can sign with my keys and not with ...

		guappa 6 hours ago \| parent \| context \| favorite \| on: PyPI now supports digital attestations How does pypi know I'm not github? Because I can sign with my keys and not with github's key. Never mind all the low level details of the temporary keys and hashes and all of that. This is an high level comment not a university book about security.