[Catalog-sig] Add link to secure connection to the PyPI front page

Jannis Leidel jannis at leidel.info
Sat Jun 4 17:38:40 CEST 2011


> Hi,
> 
> related to http://bugs.python.org/issue12226, I think it would be nice to
> add a link to the SSL connection to the PyPI front page:

Which makes me wonder, why is it that PyPI doesn't use a universally
accepted SSL cert instead of the CAcert one? Note: I'm a CAcert assurer
myself but would prefer using a cert by one of the commercial CAs for
the sake of the users.

Any opinions?

Jannis

> --- a/pypi.html 2011-06-04 10:05:47.000000000 +0200
> +++ b/pypi.html 2011-06-04 10:05:41.000000000 +0200
> @@ -177,6 +177,19 @@
> 
> <br clear="right">
> 
> +<div id="document-navigation" style="width: 30%; float: left; display: inline; padding: 4px;">
> +<b>Secure connection</b>
> +<p style="margin-bottom: 0px;">
> +PyPI offers a secure connection:
> +"<a href="https://pypi.python.org/pypi">https://pypi.python.org/pypi</a>".
> +The PyPI server certificate is signed by CAcert. On some systems
> +(Windows, Ubuntu), CAcert is not a trusted authority by default.
> +In order to use the SSL connection properly, import the
> +"<a href="http://www.cacert.org/index.php?id=3">CAcert Intermediate Certificate</a>".
> +into the browser. Make sure that you use the <em>Class 3 PKI Key</em> certificate.
> +</p>
> +</div>
> +
> <div id="document-navigation" style="margin-left: 0px; width: 30%; float: left; display: inline; padding: 4px;">
> <b>Get Packages</b>
> <p style="margin-bottom: 0px;">
> 
> 
> 
> Stefan Krah
> 
> 
> _______________________________________________
> Catalog-SIG mailing list
> Catalog-SIG at python.org
> http://mail.python.org/mailman/listinfo/catalog-sig



More information about the Catalog-SIG mailing list