[Python-Dev] Validating SSL By Default (aka Including a Cert Bundle in CPython)

Antoine Pitrou solipsis at pitrou.net
Mon Jun 3 20:34:08 CEST 2013


On Mon, 3 Jun 2013 14:12:34 -0400
Donald Stufft <donald at stufft.io> wrote:
> 
> I worry with the current situation people will just use TLS connections without realizing it's not being verified and thinking they are "safe".

Yet there's quite a visible warning in the docs:
http://docs.python.org/dev/library/urllib.request.html

Regards

Antoine.




More information about the Python-Dev mailing list