Whether requests to baseUrl would travel unencrypted, as one sentence for a warning,
or undefined when they would not: for https:, for a
URL that does not parse, and for a loopback host (localhost, 127.0.0.0/8, ::1),
where nothing leaves the machine.
The sentence names the host (url.host: host and port, never the userinfo) and what
secret travels with the requests: the base URL's credentials when it carries userinfo,
and every phrase in secrets (noun phrases such as "the API key"). It never contains
a password or key. The CLI logs it as a WARN record of ckan.http on stderr
(once per run, before the first request).
Whether requests to
baseUrlwould travel unencrypted, as one sentence for a warning, orundefinedwhen they would not: forhttps:, for a URL that does not parse, and for a loopback host (localhost, 127.0.0.0/8,::1), where nothing leaves the machine.The sentence names the host (
url.host: host and port, never the userinfo) and what secret travels with the requests: the base URL's credentials when it carries userinfo, and every phrase insecrets(noun phrases such as "the API key"). It never contains a password or key. The CLI logs it as aWARNrecord ofckan.httpon stderr (once per run, before the first request).