[Python-Dev] Whats New in 3.4 is pretty much done... (original) (raw)

Victor Stinner victor.stinner at gmail.com
Thu Mar 13 14:57:41 CET 2014


2014-03-13 11:49 GMT+01:00 Christian Heimes <christian at python.org>:

* All stdlib modules now support server cert verification including hostname matching and CRL.

* http://bugs.python.org/issue16499 isolated mode is a security improvement, too.

Ok, I added these two items.

Antoine wrote:

CRL? really? I don't remember us doing automatic CRL downloads.

It's just the "support", nothing is automatic. I understood that you can load CRL and ask for CRL validation, but it must be done explicitly. There is a function to retrieve system CRLs on Windows.

Victor



More information about the Python-Dev mailing list