Describe what a plain-http: base URL exposes on the wire, or undefined when there is
nothing to warn about: an https: URL, an unparseable one, or a loopback host
(localhost, 127.0.0.0/8, ::1). Otherwise one sentence, without a warning: prefix:
requests to <host> are sent unencrypted (http:, not https:)
the base URL's credentials are sent unencrypted to <host> (http:, not https:) when
the URL carries userinfo;
other secrets the caller sends (noun phrases in secrets, e.g. "the API key") are
named first, joined with the userinfo phrase by "and".
<host> is the URL's host and port, never its userinfo; the sentence never contains a
password or key. The CLI logs it once per run as a WARN record of nina.http on stderr.
Describe what a plain-
http:base URL exposes on the wire, orundefinedwhen there is nothing to warn about: anhttps:URL, an unparseable one, or a loopback host (localhost,127.0.0.0/8,::1). Otherwise one sentence, without awarning:prefix:requests to <host> are sent unencrypted (http:, not https:)the base URL's credentials are sent unencrypted to <host> (http:, not https:)when the URL carries userinfo;secrets, e.g."the API key") are named first, joined with the userinfo phrase by "and".<host>is the URL's host and port, never its userinfo; the sentence never contains a password or key. The CLI logs it once per run as aWARNrecord ofnina.httpon stderr.