Whether requests to baseUrl would travel unencrypted, as one sentence for a
warning (without a warning: prefix), or undefined when they would not: for
https:, for a URL that does not parse, and for a loopback host (localhost,
127.0.0.0/8, ::1), where nothing leaves the machine. Works for the catalogue URL
too.
The sentence names the host (url.host: host and port, never the userinfo) and what
secret travels with the requests: every phrase in secrets (noun phrases such as "the
catalogue URL's token"; the CLI passes that one when the catalogue URL carries a
?token=), and <urlName>'s credentials when the URL carries userinfo ("the base URL's
credentials" by default). It never contains a password or token. The CLI prints it
once per run and URL as a WARN record of regionalatlas.http on stderr.
Whether requests to
baseUrlwould travel unencrypted, as one sentence for a warning (without awarning:prefix), orundefinedwhen they would not: forhttps:, for a URL that does not parse, and for a loopback host (localhost, 127.0.0.0/8,::1), where nothing leaves the machine. Works for the catalogue URL too.The sentence names the host (
url.host: host and port, never the userinfo) and what secret travels with the requests: every phrase insecrets(noun phrases such as "the catalogue URL's token"; the CLI passes that one when the catalogue URL carries a?token=), and<urlName>'s credentialswhen the URL carries userinfo ("the base URL's credentials" by default). It never contains a password or token. The CLI prints it once per run and URL as aWARNrecord ofregionalatlas.httpon stderr.