[Python-Dev] Enable Hostname and Certificate Chain Validation
Cory Benfield
cory at lukasa.co.uk
Fri Jan 24 09:29:46 CET 2014
On 23 January 2014 08:37, Stephen J. Turnbull <stephen at xemacs.org> wrote:
>
> I don't know what the right answer is, but this needs careful
> discussion and amelioration, not just "you're broken, so take the
> consequences!"
>
Absolutely. =)
With that said, having a great big button to turn the change off
(e.g. environment variable, global setting) feels like an acceptable
mitigation to me, but then I'm probably still more aggressive than the
core developers! Either way, it looks like the deprecation dance is
going to be the consensus decision here.
More information about the Python-Dev
mailing list