[docs] [issue20988] Recommend ssl.create_default_context() in "Security considerations"

Nick Coghlan report at bugs.python.org
Thu Mar 20 05:45:39 CET 2014

New submission from Nick Coghlan:

The ssl docs currently have a security warning at the top directing users to the Security Considerations section at http://docs.python.org/3/library/ssl#ssl-security

That section currently dives directly into the technical details of choosing suitable SSL settings, and doesn't reference back to the new http://docs.python.org/3/library/ssl#ssl.create_default_context helper function.

I believe this section should *start* with an example of using the create_default_context() to create an SSL wrapped socket with reasonable settings, and only *then* continue on with the technical details.

assignee: docs at python
components: Documentation
messages: 214173
nosy: alex, christian.heimes, docs at python, giampaolo.rodola, janssen, ncoghlan, pitrou
priority: normal
severity: normal
stage: needs patch
status: open
title: Recommend ssl.create_default_context() in "Security considerations"
type: enhancement
versions: Python 3.4, Python 3.5

Python tracker <report at bugs.python.org>

More information about the docs mailing list