anchor.diff:  ->  HTTP CA certificate SHA-256 fingerprint:
     a52dd93511e8c6045e21f16654b77c9ee0f34aea26d9f40320b531c474676228
   ...
  -\----------------------------------------------------------------------
  -----
  -
  -Note down the `elastic` user password and HTTP CA fingerprint for the next sections. In the examples below they will be stored in the variables `ELASTIC_PASSWORD` and `CERT_FINGERPRINT` respectively.
  -
  -Depending on the circumstances there are two options for verifying the HTTPS connection, either verifying with the CA certificate itself or via the HTTP CA certificate fingerprint.
  +----------------------------------------------------------------
  +```
  +
  +Note down the `elastic` user password and HTTP CA fingerprint for the next 
  +sections. In the examples below they will be stored in the variables 
  +`ELASTIC_PASSWORD` and `CERT_FINGERPRINT` respectively.
  +
  +Depending on the circumstances there are two options for verifying the HTTPS 
  +connection, either verifying with the CA certificate itself or via the HTTP CA 
  +certificate fingerprint.
   
   [discrete]
   ==== Verifying HTTPS with CA certificates
   
  -Using the `ca_certs` option is the default way the Python Elasticsearch client verifies an HTTPS connection.
  -
  -The generated root CA certificate can be found in the `certs` directory in your Elasticsearch config location (`$ES_CONF_PATH/certs/http_ca.crt`). If you're running Elasticsearch in Docker there is https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html[additional documentation for retrieving the CA certificate].
  -
  -Once you have the `http_ca.crt` file somewhere accessible pass the path to the client via `ca_certs`:
  +Using the `ca_certs` option is the default way the Python {es} client verifies 
  +an HTTPS connection.
  +
  +The generated root CA certificate can be found in the `certs` directory in your 
  +{es} config location (`$ES_CONF_PATH/certs/http_ca.crt`). If you're running {es} 
  +in Docker there is 
  +https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html[additional documentation for retrieving the CA certificate].
  +
  +Once you have the `http_ca.crt` file somewhere accessible pass the path to the 
  +client via `ca_certs`:
   
   [source,python]
   ----
  
positive.code: [[auth-basic]]
  ==== HTTP Basic authentication (Username and Password)
  
  HTTP Basic authentication uses the `basic_auth` parameter by passing in a username and 
  password within a tuple:
  
  [source,python]
  ----
  
negative.code: [[connect-no-security]]
  === Connecting without security enabled
  
  WARNING: Running {es} without security enabled is not recommended.
  
  If your cluster is configured with 
  https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html[security explicitly disabled] 
  then you can connect via HTTP:
  
  [source,python]
  ----
  