[Catalog-sig] PyPI and setuptools

Marcus Smith qwcode at gmail.com
Tue Feb 12 22:13:02 CET 2013


> This is an option:
> https://gist.github.com/zed/1347055
>
>
btw, this is similar to what pip is doing in it's pull
https://github.com/pypa/pip/pull/791

although, the example given at the top of the gist just *adds* this handler
using "urllib2.build_opener".

the pip pull is going a little further and explicitly removes the bare
HTTPHandler from the call chain, otherwise the HTTP handler is in the
*front* of the call chain, and there was the concern (which should be
confirmed with testing), that it might get called during a MITM spoof.


Marcus
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20130212/a442b37c/attachment-0001.html>


More information about the Catalog-SIG mailing list