[pypy-dev] Validate SSL/TLS

[Alex Gaynor]

(a) is a no brainer to me, there's no backwards compatibility concerns
here, right?

I'm +1 on (b) as well, but let's get (a) done first. I think we need to be
being proactive in protecting our users, and the fact that CPython's core
devs are playing fast and loose with security (particular on Py2) is no
excuse.

Alex


On Wed, Jan 22, 2014 at 11:37 AM, Donald Stufft <donald at stufft.io> wrote:

> Hey there!
>
> So I’d like SSL/TLS in Python to be better and at the prompting of Alex
> I’m opening this thread to discuss the possibility of incorporating some of
> these changes into PyPy.
>
> Basically it boils down to is PyPy willing to:
>
> a) Have SSL hostname validation back ported to it
> b) Have that turned on by default
>
> -----------------
> Donald Stufft
> PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372
> DCFA
>
>
> _______________________________________________
> pypy-dev mailing list
> pypy-dev at python.org
> https://mail.python.org/mailman/listinfo/pypy-dev
>
>


-- 
"I disapprove of what you say, but I will defend to the death your right to
say it." -- Evelyn Beatrice Hall (summarizing Voltaire)
"The people's good is the highest law." -- Cicero
GPG Key fingerprint: 125F 5C67 DFE9 4084
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/pypy-dev/attachments/20140122/50d28053/attachment.html>