Checksumming of uploaded packages

[gocheese.git] / gocheese.texi

diff --git a/gocheese.texi b/gocheese.texi
index a1884397257cab203d2361e59de005084e41a6ac..f30743bffda1bc50c2c16332b4bbca7ba9911b5c 100644 (file)
--- a/gocheese.texi
+++ b/gocheese.texi
@@ -24,7 +24,9 @@ but nearly all the code was rewritten. It has huge differences:
 @itemize
 @item proxying and caching of missing packages
 @item atomic packages store on filesystem
-@item SHA256-checksummed packages (both uploaded and proxied one)
+@item SHA256-checksummed packages: storing checksums, giving them back,
+    verifying stored files integrity, verifying checksum of uploaded
+    packaged
 @item graceful HTTP-server shutdown
 @item no YAML configuration, just command-line arguments
 @item no package overwriting ability (as PyPI does)
@@ -69,6 +71,9 @@ twine upload
     --password foo dist/tarball.tar.gz
 @end verbatim
 
+If @command{twine} sends SHA256 checksum in the request, then uploaded
+file is checked against it.
+
 @node Passwords
 @unnumbered Password authentication