Antoine Pitrou added the comment: > Probably the higher level libraries don't even realize it's not > happening, it's similar to the issue of SSL validation for HTTPS > connections where a vast swathe of people didn't even realize that > their certificates weren't being validated.
Exactly. And we didn't add certificate checking in bugfix releases in the name of security. Now I appreciate that it would be a bit of a pity to wait for 3.5 to add this, so perhaps Larry wants to make an exception to the 3.4 feature freeze so that this feature can come in (assuming Christian's patch is ready). ---------- _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue19509> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
