andrii-korotkov-verkada commented on issue #39593: URL: https://github.com/apache/airflow/issues/39593#issuecomment-2515219375
> > Would there be no dependency on Flask Application Builder in v3.0? This seems important for the gov compliance, since that one uses an old version of Flask with sha1. > > Just to make it clear - we are now Python 3.9+ and all usages of none FIPS compliant ciphers/algorithms (in `airflow`) have "usedforsecurity=False" - which is feature added in Python 3.9 precisely to make sure that even if old algorithms are marked as not used for security (and that makes Airflow itself FIPS compliant from this perspective). > > But if you think there are things that are not, I think a good idea @andrii-korotkov-verkada is to open an issue for them and ask them to do the same. Is it possible that you do it? I'm confirming with Fed people on my team about whether it's okay. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
