The recommanded way to upload a package on pypi is to use twine:
Https://pypi.org/project/twine/
Which does the signing as well.
But I don't know if pip checks it.
Https://pypi.org/project/twine/
Which does the signing as well.
But I don't know if pip checks it.
>> This isn't a bug, we've purposely de-emphasized PGP on Warehouse. While we support uploading them still and they're still a part of the API, we're not exposing them to the user in the UI.