On Jan 27, 2014, at 6:13 AM, Armin Rigo <ar...@tunes.org> wrote:

> Hi Donald,
> 
> On 27 January 2014 00:07, Donald Stufft <don...@stufft.io> wrote:
>> The CPython developers have thus far decided that back porting hostname 
>> verification to
>> CPython 2.x is not worth breaking the policy of no new features in 2.7. I 
>> disagree with this
>> conclusion fwiw.
> 
> You're considering adding a feature to PyPy 2 that is not present in
> CPython 2.7.  Our general policy is that this is a bad idea.  

Ok, Well IDK the policies I was complaining about CPython not doing this
and Alex told me to raise the issue on the PyPy mailing list :)

> How
> about you create and distribute a regular CPython C extension module?
> If you do, and (for example) it is written with CFFI, then it will
> also work out of the box on PyPy.

It doesn’t need to be C, it’d be implemented in pure Python.

> 
> (I also remind you that you have not answered the question "why not
> use PyOpenSSL instead”.)

PyOpenSSL (nor does OpenSSL) does not contain host name validation
code. OpenSSL has historically said that this is up to the app to provide.

> 
> 
> A bientôt,
> 
> Armin.


-----------------
Donald Stufft
PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
pypy-dev mailing list
pypy-dev@python.org
https://mail.python.org/mailman/listinfo/pypy-dev

Reply via email to