Message229417
Update on 2.7:
- there are no SSL servers in the stdlib (ha)
- SSL clients don't do any auto-downgrading
so it's not obvious we should patch something (if people choose to pass PROTOCOL_SSLv3, it's their problem).
Update on 3.4:
- the only SSL server in the stdlib is in asyncio, but it forces the user to pass their own SSL context (good!)
- SSL clients don't do any auto-downgrading
(3.5 should be similar) |
|
Date |
User |
Action |
Args |
2014-10-15 08:50:13 | pitrou | set | recipients:
+ pitrou, janssen, vstinner, giampaolo.rodola, christian.heimes, Arfrever, alex, dstufft, Lukasa |
2014-10-15 08:50:13 | pitrou | set | messageid: <1413363013.91.0.695360620227.issue22638@psf.upfronthosting.co.za> |
2014-10-15 08:50:13 | pitrou | link | issue22638 messages |
2014-10-15 08:50:13 | pitrou | create | |
|