Looking at this patch, I definitely agree with the need for
documentation.    And a test case which uses the SafeTransport class. 
But the patch itself also needs a bit more work.  (It uses httplib.HTTPS
underneath, and that needs more work, too.)  At a minimum, the caller
should be able to optionally specify somehow, either as a contructor
arg, or otherwise (a module-global variable, perhaps), a set of
certificate-authority root certs, which, if specified, would cause
client-side validation of the server's certificate.  I think this should
be added as an optional constructor arg to the HTTPS class.