Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Need a way to acknowledge "insecure transport scheme" warnings #1313

Closed
rassie opened this issue Nov 11, 2013 · 6 comments
Closed

Need a way to acknowledge "insecure transport scheme" warnings #1313

rassie opened this issue Nov 11, 2013 · 6 comments
Labels
auto-locked Outdated issues that have been locked by automation
Milestone

Comments

@rassie
Copy link

rassie commented Nov 11, 2013

The "uses an insecure transport scheme" warnings probably have been well-meant, however there needs to be a way to disable them since they clutter the installation output heavily. This is especially misleading in local secured environments with local PyPI mirrors or egg/wheel collections completely under own control. It is also not really easy to setup a HTTPS server locally, since in most cases you'd need a proper verifiable certificate (pip doesn't allow unverified HTTPS anymore), so HTTP on local networks or actually in any not-PyPI case is a viable use case. HTTP server is also just a one-liner away and is also recommended in many tutorials ("put your tarballs in a directory, fire up a HTTPSimpleServer and use --find-links").

@dstufft dstufft added this to the 1.6 milestone Mar 28, 2014
@tebeka
Copy link

tebeka commented Jun 29, 2014

👍

@hpk42
Copy link

hpk42 commented Jul 11, 2014

This is a duplicate of #1456

@Ivoz
Copy link
Contributor

Ivoz commented Jul 11, 2014

Chronologically, 1456 would be a duplicate of this.

@hpk42
Copy link

hpk42 commented Jul 11, 2014

Certainly.
On Jul 11, 2014 2:17 PM, "Matt Iversen" notifications@github.com wrote:

Chronologically 1456 would be a duplicate of this.


Reply to this email directly or view it on GitHub
#1313 (comment).

@adiroiban
Copy link

+1 I am using a private mirror over the VPN (OpenVPN) so HTTPS over an already SSL socket is overkill.

please allow us to shoot ourselves in the foot! ... and I don't care if someone will discover that I want to install https://github.com/ajalt/fuckitpy and sends another package on the line

thanks!

@mdengler
Copy link

It does not appear to be a duplicate of #1456.

@lock lock bot added the auto-locked Outdated issues that have been locked by automation label Jun 5, 2019
@lock lock bot locked as resolved and limited conversation to collaborators Jun 5, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
auto-locked Outdated issues that have been locked by automation
Projects
None yet
Development

No branches or pull requests

7 participants