1
vote
1answer
106 views

Is giving myself write permission on my Python `site-packages` directory a way to avoid `sudo pip` risks?

I understand that there are security risks involved in installing pip under sudo, but for various reasons I would like to continue installing my packages in site-packages (on OSX 10.9), which ...
2
votes
2answers
671 views

Do pip and easy_install download Python packages securely?

For example, do they check a digital signature (like apt-get and Windows Update) or can they be required to use SSL? If not, I'm a bit concerned that the downloaded packages could be trojaned..