Please +1 this pip ticket if you feel that supporting TLS cert and GPG verification should be given the highest priority.

https://github.com/pypa/pip/issues/425

I think it's paramount that pip gets this done right now. Installing code directly from PyPI is extremely scary now and has been for years...