[Python-Dev] Enable Hostname and Certificate Chain Validation (original) (raw)

Antoine Pitrou solipsis at pitrou.net
Wed Jan 22 20:02:40 CET 2014


On Wed, 22 Jan 2014 13:50:37 -0500 Donald Stufft <donald at stufft.io> wrote:

Ironically this is the exact reason why validation should happen by default :]

I think most of us would agree that a new client API should do validation by default (with an easy way to opt out). So let's concentrate on the question of whether and how to migrate existing APIs while remaining user-friendly.

Regards

Antoine.



More information about the Python-Dev mailing list