New submission from Antoine Pitrou: Spun off from #12226: distutils now uses HTTPS by default to connect PyPI, but certs aren't checked at all.
---------- components: Library (Lib) messages: 206800 nosy: Giovanni.Bajo, alexis, benjamin.peterson, christian.heimes, dstufft, eric.araujo, georg.brandl, pitrou priority: high severity: normal status: open title: distutils should check PyPI certs when connecting to it type: security versions: Python 2.7, Python 3.2, Python 3.3, Python 3.4 _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue20050> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
