<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>Apologies as I’ve just recently sub’d to pypy-dev so I don’t know it’s normal</div><div>speed and such.</div><div><br></div><div>Is there enough here that a patch to do (a) would be a reasonable next step?</div><br><div><div>On Jan 22, 2014, at 12:45 PM, Donald Stufft <<a href="mailto:donald@stufft.io">donald@stufft.io</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div><br class="Apple-interchange-newline">On Jan 22, 2014, at 12:40 PM, Alex Gaynor <<a href="mailto:alex.gaynor@gmail.com">alex.gaynor@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">(a) is a no brainer to me, there's no backwards compatibility concerns here, right?</div></blockquote><div><br></div><div>Not with PyPy itself, it’d obviously be a difference from CPython itself (you’d need some sort of boolean toggle to turn it on and off that wouldn’t expect in CPython 2.7) but that could default to False and if someone doesn’t use it they’d get the same behavior as previous versions of PyPy and the same as CPython 2.7.</div><div><br></div><div>Obviously if they did use it then their code would only run on PyPy.</div><br><blockquote type="cite"><div dir="ltr"><div><br></div><div>I'm +1 on (b) as well, but let's get (a) done first. I think we need to be being proactive in protecting our users, and the fact that CPython's core devs are playing fast and loose with security (particular on Py2) is no excuse.</div><div><br></div><div>Alex</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Jan 22, 2014 at 11:37 AM, Donald Stufft<span class="Apple-converted-space"> </span><span dir="ltr"><<a href="mailto:donald@stufft.io" target="_blank">donald@stufft.io</a>></span><span class="Apple-converted-space"> </span>wrote:<br><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex;">Hey there!<br><br>So I’d like SSL/TLS in Python to be better and at the prompting of Alex I’m opening this thread to discuss the possibility of incorporating some of these changes into PyPy.<br><br>Basically it boils down to is PyPy willing to:<br><br>a) Have SSL hostname validation back ported to it<br>b) Have that turned on by default<br><br>-----------------<br>Donald Stufft<br>PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA<br><br><br>_______________________________________________<br>pypy-dev mailing list<br><a href="mailto:pypy-dev@python.org">pypy-dev@python.org</a><br><a href="https://mail.python.org/mailman/listinfo/pypy-dev" target="_blank">https://mail.python.org/mailman/listinfo/pypy-dev</a><br><br></blockquote></div><br><br clear="all"><div><br></div>--<span class="Apple-converted-space"> </span><br><div dir="ltr">"I disapprove of what you say, but I will defend to the death your right to say it." -- Evelyn Beatrice Hall (summarizing Voltaire)<br>"The people's good is the highest law." -- Cicero<br><div>GPG Key fingerprint: 125F 5C67 DFE9 4084</div></div></div></blockquote></div><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><br>-----------------<br>Donald Stufft<br>PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA</div></blockquote></div><br><div>
<br>-----------------<br>Donald Stufft<br>PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA
</div>
<br></body></html>