Deficiency in urllib/socket for https?

[John J. Lee]

jjl at pobox.com (John J. Lee) writes:
[...]
> Would you mind submitting a doc patch (both urllib and urllib2 docs
> appear to need fixing -- urllib2 to say that it never verifies, urllib
> to say that it skips verification if an appropriate x509 mapping isn't
> supplied)?

Hmm, maybe I've got this wrong: the fact that key/cert args are passed
to httplib.HTTPS by urllib doesn't mean authentication happens, and
the fact that they're not passed by urllib2 doesn't mean
authentication doesn't happen.  I'll investigate.


John