McSinyx
/
pip
mirror of https://github.com/pypa/pip
1
1
Fork 0
Code Issues Releases Activity

Clarification on removed urls

This commit is contained in:
Devesh Kumar Singh 2020-03-31 20:34:21 +05:30
parent 6fbf80a9f9
commit 9af42c27e8
2 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/html/reference/pip_install.rst
View File

@ -402,9 +402,13 @@ Git
^^^
pip currently supports cloning over ``git``, ``git+http``, ``git+https``,
``git+ssh``, ``git+git`` and ``git+file``, but note that the ``git``, ``git+git``,
and ``git+http`` are not recommended due to their lack of security.
(The former two uses `the Git Protocol.`_)
``git+ssh``, ``git+git`` and ``git+file``.
.. warning::
Note that the ``git``, ``git+git``,and ``git+http`` are not recommended.
(The former two use `the Git Protocol`_, which lacks authentication, and HTTP is
insecure due to lack of TLS based encryption)
Here are the supported forms::
@ -424,7 +428,7 @@ When passing a commit hash, specifying a full hash is preferable to a partial
hash because a full hash allows pip to operate more efficiently (e.g. by
making fewer network calls).
.. _`the Git Protocol.`: https://git-scm.com/book/en/v2/Git-on-the-Server-The-Protocols
.. _`the Git Protocol`: https://git-scm.com/book/en/v2/Git-on-the-Server-The-Protocols
Mercurial
^^^^^^^^^

3
news/1983.doc
View File

@ -1 +1,2 @@
Remove VCS URLs pertaining to the Git protocol from docs
Emphasize that VCS URLs using git, git+git and git+http are insecure due to
lack of authentication and encryption