[Python-Dev] PEP 476: Enabling certificate validation by default! (original) (raw)

Benjamin Peterson benjamin at python.org
Thu Sep 4 01:10:31 CEST 2014

On Wed, Sep 3, 2014, at 13:37, Alex Gaynor wrote:

Guido van Rossum <guido python.org> writes:

> OK, that changes my position for 2.7 (but not for 3.5). I had assumed there > was a way to disable the cert check by changing one parameter to the > urlopen() call. (And I had wanted to add that there should be a clear FAQ > about the subject.) If this isn't possible that changes the situation. (But I > still think that once we do have that simple change option we should do it, > in a later 2.7 upgrade.) I apologize for speaking before I had read all > facts, and I'll await what you and Nick come up with. > --Guido This probably doesn't surprise anyone, but I'm more than happy to do the back- porting work for httplib, and any other modules which need SSLContext support; does this require an additional PEP, or does it fit under PEP466 or PEP476?

I imagine you could put it into 476.

More information about the Python-Dev mailing list