Skip to content

Commit 28a69e0

Browse files
committed
Merge pull request #100 from untitaker/distutils-is-secure-now
Rephrase section on distutil's security
2 parents ba2a27f + 0dc6dda commit 28a69e0

1 file changed

Lines changed: 5 additions & 4 deletions

File tree

README.rst

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -10,10 +10,11 @@ Why Should I Use This?
1010
----------------------
1111

1212
The biggest reason to use twine is that it securely authenticates you to PyPI
13-
over HTTPS using a verified connection while ``python setup.py upload`` `uses
14-
HTTP and exposes your credentials <http://bugs.python.org/issue12226>`_. This
15-
means anytime you use it you expose your username and password to being
16-
sniffed. Twine uses only verified TLS to upload to PyPI protecting your
13+
over HTTPS using a verified connection while ``python setup.py upload`` `only
14+
recently stopped using HTTP <http://bugs.python.org/issue12226>`_ in Python
15+
2.7.9+ and Python 3.2+. This means anytime you use ``python setup.py upload``
16+
with an older Python version, you expose your username and password to being
17+
easily sniffed. Twine uses only verified TLS to upload to PyPI protecting your
1718
credentials from theft.
1819

1920
Secondly it allows you to precreate your distribution files.

0 commit comments

Comments
 (0)