<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal>I think you mean out-of-band updates, and by “you” I'm going to pretend you mean PyCA ;)</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Top-posted from my Windows phone</p><p class=MsoNormal><o:p> </o:p></p><div style='mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='border:none;padding:0in'><b>From: </b><a href="mailto:christian@python.org">Christian Heimes</a><br><b>Sent: </b>Tuesday, January 16, 2018 21:42<br><b>To: </b><a href="mailto:python-dev@python.org">python-dev@python.org</a><br><b>Subject: </b>Re: [Python-Dev] Python 3.7: Require OpenSSL >=1.0.2 / LibreSSL>=2.5.3</p></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>On 2018-01-16 08:08, Steve Dower wrote:</p><p class=MsoNormal>> From my perspective, we can’t keep an OpenSSL-like API and use Windows</p><p class=MsoNormal>> platform libraries (we *could* do a requests-like API easily enough, but</p><p class=MsoNormal>> even urllib3 is painfully low-level).</p><p class=MsoNormal>> </p><p class=MsoNormal>> </p><p class=MsoNormal>> </p><p class=MsoNormal>> We have to continue shipping our own copy of OpenSSL on Windows. Nothing</p><p class=MsoNormal>> to negotiate here except whether OpenSSL releases should trigger a</p><p class=MsoNormal>> Python release, and I think that decision can stay with the RM.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>3.7 will no longer use static linking. We can offer out-of-bounds</p><p class=MsoNormal>updates of the OpenSSL DLLs. And by "we", I'm talking about you. :)</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Christian</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>_______________________________________________</p><p class=MsoNormal>Python-Dev mailing list</p><p class=MsoNormal>Python-Dev@python.org</p><p class=MsoNormal>https://mail.python.org/mailman/listinfo/python-dev</p><p class=MsoNormal>Unsubscribe: https://mail.python.org/mailman/options/python-dev/steve.dower%40python.org</p><p class=MsoNormal><o:p> </o:p></p></div></body></html>