[Python-Dev] Enable Hostname and Certificate Chain Validation (original) (raw)

Cory Benfield cory at lukasa.co.uk
Fri Jan 24 09:29:46 CET 2014

On 23 January 2014 08:37, Stephen J. Turnbull <stephen at xemacs.org> wrote:

I don't know what the right answer is, but this needs careful discussion and amelioration, not just "you're broken, so take the consequences!" Absolutely. =)

With that said, having a great big button to turn the change off (e.g. environment variable, global setting) feels like an acceptable mitigation to me, but then I'm probably still more aggressive than the core developers! Either way, it looks like the deprecation dance is going to be the consensus decision here.

More information about the Python-Dev mailing list