# WARNING: The repository located at example.com is not a trusted or secure host and is being ignored. If this repository is available via HTTPS we recommend you use HTTPS instead, otherwise you may silence this warning and allow it anyway with '--trusted-host example.com'.

- **ID:** `python/pip-index-url-not-trusted`
- **Domain:** python
- **Category:** config_error
- **Verification:** ai_generated
- **Fix Rate:** 80%

## Root Cause

pip is configured to use an HTTP index URL, which is insecure and ignored by default.

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| 3.8 | active | — | — |
| 3.9 | active | — | — |
| 3.10 | active | — | — |
| 3.11 | active | — | — |
| 3.12 | active | — | — |

## Workarounds

1. **** (95% success)
   ```
   Use HTTPS for the index URL: `pip install -i https://example.com/simple foo`.
   ```
2. **** (80% success)
   ```
   If HTTP is unavoidable, add `--trusted-host example.com` to the pip command or config.
   ```

## Dead Ends

- **** — The index is ignored, so packages won't be found. (90% fail)
- **** — Security risk; may still be blocked by network policies. (40% fail)