<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><blockquote type="cite"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto; "><div dir="ltr"><div>Basically, crypto is scary, openssl is a footgun, and humans are fallible. Therefore I think we want have a pretty strict policy that everything needs to go through a PR *and be merged by someone else*. Anyone have a problem with that?</div>
<span class="HOEnZb"><font color="#888888">
<div></div></font></span></div></blockquote><div><br></div><div>I don't even need any of those arguments to think code review is great.<br></div></div></div></div></blockquote></div><br><div>Aye. We’re trying nothing less than giving canonical crypto tools to the Python community. Strict is good.</div></body></html>