summaryrefslogtreecommitdiff
path: root/README.txt
diff options
context:
space:
mode:
authorJason R. Coombs <jaraco@jaraco.com>2013-05-14 07:52:19 -0400
committerJason R. Coombs <jaraco@jaraco.com>2013-05-14 07:52:19 -0400
commit444e5ef4d7d814040bf43fa0f4878e53af528c42 (patch)
treec856489ed3ac3d97e2c7a300138635409c065714 /README.txt
parentee08a08dce9903e1b957a18f3c8f7ea0ac5436b1 (diff)
downloadpython-setuptools-bitbucket-444e5ef4d7d814040bf43fa0f4878e53af528c42.tar.gz
Revert README to match setuptools-0.6 branch (originally copied from requests implementation which was not used).
Diffstat (limited to 'README.txt')
-rwxr-xr-xREADME.txt30
1 files changed, 0 insertions, 30 deletions
diff --git a/README.txt b/README.txt
index 12b1e390..22d76da2 100755
--- a/README.txt
+++ b/README.txt
@@ -5,36 +5,6 @@ Installing and Using Setuptools
.. contents:: **Table of Contents**
-----------------------------------
-Security Issues - Read this First!
-----------------------------------
-
-Setuptools and ``easy_install`` currently default to allowing automated
-download and execution of code from anywhere on the internet, without actually
-verifying the owners of the websites or the authors of the code. If you want
-your installation to be more secure, you will need to:
-
- 1. Manually install the `requests <https://pypi.python.org/pypi/requests>`_
- library **after** installing setuptools, using an SSL-enabled browser or
- other tool. (This will enable SSL certificate verification.)
-
- 2. Configure your default ``--allow-hosts`` setting so that ``easy_install``
- will only download from sites you trust. (E.g., to only download from
- ``pypi.python.org`` or some other trusted package index.)
-
- 3. If you are using a Python version less than 2.6, you will also need to
- install the `SSL backport module <https://pypi.python.org/pypi/requests>`_
- to enable SSL downloads from PyPI. (Unfortunately, the ``requests``
- package does not support older versions of Python at this time, so SSL
- certificate verification will not be enabled. But at least you'll still be
- able to use PyPI, which is in the process of switching to an all-SSL policy
- for downloads.
-
-For more information on how to do all of the above, and for other security-
-related information, please see the full `setuptools security documentation
-<http://peak.telecommunity.com/DevCenter/SetuptoolsSecurity>`_.
-
-
-------------------------
Installation Instructions
-------------------------