➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author hynek
Recipients christian.heimes, eric.araujo, gregory.p.smith, gvanrossum, hynek, loewis, pitrou, tarek
Date 2013-02-04.12:03:51
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1359979431.5.0.902821866699.issue17121@psf.upfronthosting.co.za>
In-reply-to
Content 
I would strongly prefer to back port certificate validation instead. Is there anything *practical* that makes it hard/impossible?

If we want to keep features stable, we can add it privately so it’s only usable by distutils. The susceptibility to (easy!) MITM attacks can be counted as a security bug and this seems the most practical resolve.
History
Date User Action Args
2013-02-04 12:03:51hyneksetrecipients: + hynek, gvanrossum, loewis, gregory.p.smith, pitrou, christian.heimes, tarek, eric.araujo
2013-02-04 12:03:51hyneksetmessageid: <1359979431.5.0.902821866699.issue17121@psf.upfronthosting.co.za>
2013-02-04 12:03:51hyneklinkissue17121 messages
2013-02-04 12:03:51hynekcreate