[issue19509] No SSL match_hostname() in ftp, imap, nntp, pop, smtp modules

[Antoine Pitrou]

Antoine Pitrou added the comment:

> Probably the higher level libraries don't even realize it's not
> happening, it's similar to the issue of SSL validation for HTTPS
> connections where a vast swathe of people didn't even realize that
> their certificates weren't being validated.

Exactly. And we didn't add certificate checking in bugfix releases in
the name of security.

Now I appreciate that it would be a bit of a pity to wait for 3.5 to add
this, so perhaps Larry wants to make an exception to the 3.4 feature
freeze so that this feature can come in (assuming Christian's patch is
ready).

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue19509>
_______________________________________