2
votes
2answers
569 views

Do pip and easy_install download Python packages securely?

For example, do they check a digital signature (like apt-get and Windows Update) or can they be required to use SSL? If not, I'm a bit concerned that the downloaded packages could be trojaned..