diff options
author | Jason R. Coombs <jaraco@jaraco.com> | 2013-05-14 07:52:19 -0400 |
---|---|---|
committer | Jason R. Coombs <jaraco@jaraco.com> | 2013-05-14 07:52:19 -0400 |
commit | 444e5ef4d7d814040bf43fa0f4878e53af528c42 (patch) | |
tree | c856489ed3ac3d97e2c7a300138635409c065714 /README.txt | |
parent | ee08a08dce9903e1b957a18f3c8f7ea0ac5436b1 (diff) | |
download | python-setuptools-bitbucket-444e5ef4d7d814040bf43fa0f4878e53af528c42.tar.gz |
Revert README to match setuptools-0.6 branch (originally copied from requests implementation which was not used).
Diffstat (limited to 'README.txt')
-rwxr-xr-x | README.txt | 30 |
1 files changed, 0 insertions, 30 deletions
@@ -5,36 +5,6 @@ Installing and Using Setuptools .. contents:: **Table of Contents** ----------------------------------- -Security Issues - Read this First! ----------------------------------- - -Setuptools and ``easy_install`` currently default to allowing automated -download and execution of code from anywhere on the internet, without actually -verifying the owners of the websites or the authors of the code. If you want -your installation to be more secure, you will need to: - - 1. Manually install the `requests <https://pypi.python.org/pypi/requests>`_ - library **after** installing setuptools, using an SSL-enabled browser or - other tool. (This will enable SSL certificate verification.) - - 2. Configure your default ``--allow-hosts`` setting so that ``easy_install`` - will only download from sites you trust. (E.g., to only download from - ``pypi.python.org`` or some other trusted package index.) - - 3. If you are using a Python version less than 2.6, you will also need to - install the `SSL backport module <https://pypi.python.org/pypi/requests>`_ - to enable SSL downloads from PyPI. (Unfortunately, the ``requests`` - package does not support older versions of Python at this time, so SSL - certificate verification will not be enabled. But at least you'll still be - able to use PyPI, which is in the process of switching to an all-SSL policy - for downloads. - -For more information on how to do all of the above, and for other security- -related information, please see the full `setuptools security documentation -<http://peak.telecommunity.com/DevCenter/SetuptoolsSecurity>`_. - - ------------------------- Installation Instructions ------------------------- |