PEP 807: feedback

Signed-off-by: William Woodruff <william@astral.sh>

Author: woodruffw

peps/pep-0807.rst

@@ -153,7 +153,7 @@ The discovery mechanism is as follows:
    producing the *discovery key*.
 
    For the above example, the discovery key is
-   ``af030c06750716b1b35852298fe852b90def13dcbd012a5fe5148470f1206bfc``. [#fn-hash]_
+   ``0cace9579789849db6e16d48df183951c8f17582200d84bc93c7678d6c8f78a7``. [#fn-hash]_
 
 4. The uploading client constructs a *discovery URL* by taking the
    scheme and authority components (as defined in :rfc:`3986`)
@@ -267,7 +267,10 @@ containing a JSON object with the following fields:
 
   The server **MUST NOT** issue temporary upload credentials
   that expire in less than 15 minutes (900 seconds) or more than
-  6 hours (21,600 seconds) from the time of the request. [#fn-expires]_
+  6 hours (21,600 seconds) from the time of the request.
+
+  The maximum expiry time of 6 hours is chosen to match common runtime limits
+  on popular CI/CD providers like GitHub Actions.
 
   The uploading client **MAY** use this time (or the minimum specified
   above) to determine when to refresh the upload credential, if needed.
@@ -409,18 +412,22 @@ This approach too has downsides:
 Footnotes
 =========
 
-.. [#fn-hash] ``shasum -a 256 <<< '/legacy/'``
+.. [#fn-hash]
+               .. code-block:: python
+
+                  >>> import hashlib
+                  ...
+                  ... path = "/legacy/"
+                  ... key = hashlib.sha256(path.encode("utf-8")).hexdigest()
+                  ... print(key)
+                  0cace9579789849db6e16d48df183951c8f17582200d84bc93c7678d6c8f78a7
 
 .. [#fn-oidc] Widely used CI/CD and cloud providers various implement "ambient"
               OIDC token retrieval mechanisms that aren't standardized.
               These various mechanisms are currently abstracted over by
               existing components of the Python packaging ecosystem,
               such as the `id package <https://pypi.org/p/id>`_.
 
-.. [#fn-expires] The maximum expiry time of 6 hours is chosen to match
-                 common runtime limits on popular CI/CD providers like
-                 GitHub Actions.
-
 Copyright
 =========