[New-bugs-announce] [issue20988] Recommend ssl.create_default_context() in "Security considerations"

Nick Coghlan report at bugs.python.org
Thu Mar 20 05:45:39 CET 2014


New submission from Nick Coghlan:

The ssl docs currently have a security warning at the top directing users to the Security Considerations section at http://docs.python.org/3/library/ssl#ssl-security

That section currently dives directly into the technical details of choosing suitable SSL settings, and doesn't reference back to the new http://docs.python.org/3/library/ssl#ssl.create_default_context helper function.

I believe this section should *start* with an example of using the create_default_context() to create an SSL wrapped socket with reasonable settings, and only *then* continue on with the technical details.

----------
assignee: docs at python
components: Documentation
messages: 214173
nosy: alex, christian.heimes, docs at python, giampaolo.rodola, janssen, ncoghlan, pitrou
priority: normal
severity: normal
stage: needs patch
status: open
title: Recommend ssl.create_default_context() in "Security considerations"
type: enhancement
versions: Python 3.4, Python 3.5

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue20988>
_______________________________________


More information about the New-bugs-announce mailing list