[Python-Dev] PEP476: Enabling certificate validation by default
alex.gaynor at gmail.com
Sat Sep 20 00:34:08 CEST 2014
Pushed a new version which I believe adresses all of these. I added an
example of opting-out with urllib.urlopen, let me know if there's any other
APIs you think I should show an example with.
On Fri, Sep 19, 2014 at 3:06 PM, Guido van Rossum <guido at python.org> wrote:
> The PEP doesn't specify any of the API changes for Python 2.7. I feel it
> is necessary for the PEP to show a few typical code snippets using urllib
> in Python 2.7 and how one would modify these in order to disable the cert
> There are also a few typos; especially this paragraph puzzled me:
> This will be acheived by adding a new ``ssl._create_default_https_context``
> function, which is the same as ``ssl.create_default``. ``http.client`` can
> replace it's usage of ``ssl._create_stdlib_context`` with the new
> (1) spelling: it's achieved, not achieved
> (2) method name: it's ssl.create_default_context, not ssl.create_default
> (3) There's not enough whitespace (in the rendered HTML on
> legacy.python.org) before http.client -- I kept reading it as "... which
> is the same as ssl.create_default.http.client ..."
> (4) There's no mention of the Python 2 equivalent of http.client.
> Finally, it's kind of non-obvious in the PEP that this affects Python
> 2.7.X (I guess the one after the next) as well as 3.4 and 3.5.
> On Fri, Sep 19, 2014 at 9:53 AM, Alex Gaynor <alex.gaynor at gmail.com>
>> Hi all,
>> I've just updated the PEP to reflect the API suggestions from Nick, and
>> fact that the necessary changes to urllib were landed.
>> I think this is ready for pronouncement, Guido?
>> Python-Dev mailing list
>> Python-Dev at python.org
> --Guido van Rossum (python.org/~guido)
"I disapprove of what you say, but I will defend to the death your right to
say it." -- Evelyn Beatrice Hall (summarizing Voltaire)
"The people's good is the highest law." -- Cicero
GPG Key fingerprint: 125F 5C67 DFE9 4084
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Python-Dev