On 24 November 2015 at 06:47, Wes Turner email@example.com wrote:
- Does this affect easy_install?
easy_install has validated certificates since distribute was merged back into the project as part of setuptools 0.7 , and aside from one issue with HTTPS tunnelling , the certificate verification code has been stable since setuptools 1.3 .
- If/because this affects easy_install,
should the guidance / suggested package installation tool be [pip]; because pip install_requires backports.ssl_match_hostname
setuptools/easy_install uses backports.ssl_match_hostname if it's available, and otherwise has its own implementation.