Le vendredi 20 octobre 2017 10:49:40 UTC+2, Jeroen Demeyer a écrit : > > On 2017-10-19 17:24, William Stein wrote: > > Good, as well they should. Like you, they likely feel a responsibility > > to their users to do the right thing regarding security. I really > > appreciate the "so much trouble" you are "causing" Emmanuel. > > I also agree here. The only options should be "use https" or "don't > download anything". That's exactly what pip does. > > And the fly in the ointment is that, for example, "our" pip doesn't give us the choice. It forces us to "don't download anything'...
I'm afraid that R users will sooner or later be confronted to the same choice. In Hobson's variant if we don't have an https-enabled SSL library. Nowadays, that means OpenSSL... -- Emmanuel Charpentier -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+unsubscr...@googlegroups.com. To post to this group, send email to sage-devel@googlegroups.com. Visit this group at https://groups.google.com/group/sage-devel. For more options, visit https://groups.google.com/d/optout.
