In case of mistake, like 403, pip has to advise you "the bundle repo is on http, Do you need to obtain it?" If HTTP authentication isn't in use as well as provider has a cookie-centered authentication scheme as is definitely the norm today, then a 403 or a 404 http://pigpgs.com