[Python-Dev] PEP 476: Enabling certificate validation by default! (original) (raw)

David Reid dreid at dreid.org
Fri Aug 29 21:56:59 CEST 2014

Alex Gaynor <alex.gaynor gmail.com> writes:

Hi all, I've just submitted PEP 476, on enabling certificate validation by default for HTTPS clients in Python. Please have a look and let me know what you think.

Yes please.

The two most commons answers I get to "Why did you switch to go?" are "Concurrency" and "The stdlib HTTP client verifies TLS by default."

In a work related survey of webhook providers I found that only ~7% of HTTPS URLs would be affected by a change like this.

-David

More information about the Python-Dev mailing list