Merge pull request python#3 from mnm678/relative_files

Relative or absolute filenames

pep-0458.txt

@@ -305,7 +305,9 @@ latest *snapshot* and can signify when a new snapshot of the repository is
 available.  The *snapshot* role indicates the latest version of all the TUF
 metadata files (other than *timestamp*).  The *targets* role lists the
 available target files (in our case, it will be all files on PyPI under the
-/simple and /packages directories).  Each top-level role will serve its
+/simple and /packages directories).  These target files do not need to be
+URIs or relative files on the same repository as long as they can be accessed
+by anyone performing an update.  Each top-level role will serve its
 responsibilities without exception.  Figure 1 provides a table of the roles
 used in TUF.