It started as a discussion in this issue: http://bugs.python.org/issue22417#msg284604

I think, that warning can be removed.  If no one has any objections, I will commit this attached patch.

The warning for urllib2.urlopen() was removed in revision 1882157b298a. However, a couple other warnings were converted to “Changed in version 2.7.9” in revision fb83916c3ea1, which seems safer to me.

Removing documentation almost seems like a step backwards. The usual approach for new features is to document the new behaviour, and when it changed. This has also been done for the “context” etc parameters added in a bug fix release. So I suggest to document that the certificate is verified since 2.7.9, but not beforehand.

@Martin, that's a sound advice. I agree to it. I'll change it to a note (instead of warning) which mentions about certificate verification since 2.7.9.

Here is the updated patch that addresses the comment.

The change note belongs outside the seealso.

I think also that wasn't exactly what Martin had in mind, I think he meant a `.. versionchanged` directive -- and given that this was originally a warning, personally I'd leave the warning but reword it, it's still relevant for pre-2.7.9 users.

E.g. something like:

.. seealso::

   <requests module info>

.. versionchanged:: 2.7.9

    HTTPS certificates now have hostname verification enabled by default.

.. warning::

    Versions prior to 2.7.9 do not safely verify hostnames. It is not recommended to use this module on these versions -- the aformentioned requests module can be used instead.

Or the like.

Hi Julian, here is the patch that addresses you comments. Thanks

Cool! If I can nitpick one last time, in the versionchanged block, you have `HTTPS URIs` but in the warning you use `HTTPS Urls` -- probably best to use consistent casing and URL vs URI.

Other than that, lgtm to merge.

Thank you for the review, Julian.
Addressed it and the change is committed at changeset b5125e971fdd