[New-bugs-announce] [issue10441] Please by default enforce ssl certificate checking in modules that can have user's which *depend* on the security of the ssl connection.

[david]

New submission from david <db.pub.mail at gmail.com>:

Please by default enforce ssl certificate checking in modules that can have user's which *depend* on the security of the ssl connection.

See https://bugs.launchpad.net/ubuntu/+source/offlineimap/+bug/675120
http://bugs.python.org/issue10274
http://bugs.python.org/issue1589

and http://seclists.org/oss-sec/2010/q4/33

So I will name the following modules(as starting point):
1. httplib http://docs.python.org/library/httplib.html
2. urllib http://docs.python.org/library/urllib.html
3. urllib2 http://docs.python.org/library/urllib2.html
4. imaplib http://docs.python.org/library/imaplib.html

----------
messages: 121337
nosy: db
priority: normal
severity: normal
status: open
title: Please by default enforce ssl certificate checking in modules that can have user's which *depend* on the security of the ssl connection.

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue10441>
_______________________________________