New submission from mogli:
The documentation (https://docs.python.org/2/library/ssl.html) says:
The settings in Python 2.7.9 are: PROTOCOL_SSLv23, OP_NO_SSLv2, and OP_NO_SSLv3
with high encryption cipher suites without RC4
But it still seems to use RC4: https://www.howsmyssl.com/a/check
Also
mogli added the comment:
So it seems the docs are wrong.
--
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue23679
___
___
Python-bugs-list mailing
mogli added the comment:
That was fast, great job!
For the record: The SSLv3 issue I also wrote about was a false positive because
the test only works with Javascript. Python 2.7.9 has SSLv3 disabled by default
as it should.
urllib2.urlopen(https://sslv3.dshield.org;) # fails as it should
