Re: [Python-Dev] PYTHONHTTPSVERIFY env var

2015-05-08 Thread Nick Coghlan
On 8 May 2015 8:14 pm, "M.-A. Lemburg" wrote: > > On 08.05.2015 11:36, Nick Coghlan wrote: > > On 8 May 2015 6:52 pm, "M.-A. Lemburg" wrote: > >> > >> On 07.05.2015 04:30, Nick Coghlan wrote: > Can we please make the monkeypatch a regular part of Python's > site.py which can enabled via

Re: [Python-Dev] PYTHONHTTPSVERIFY env var

2015-05-08 Thread Nick Coghlan
On 8 May 2015 9:52 pm, "Antoine Pitrou" wrote: > > > Using an environment variable to disable a security feature sounds like > an extremely bad idea. Environment variables are hidden state. > Generally you don't know up front which values they will have when > running an executable, and people don

[Python-Dev] coming soon: 2.7.10

2015-05-08 Thread Benjamin Peterson
In the spirit of regular releases, it's time to release 2.7.10. I'm going to plan to cut rc1 this weekend with a final in 2 weeks. I apologize for the short notice; time has crept up on me, and I have commitments in June that prevent pushing releases into that month. __

[Python-Dev] Summary of Python tracker Issues

2015-05-08 Thread Python tracker
ACTIVITY SUMMARY (2015-05-01 - 2015-05-08) Python tracker at http://bugs.python.org/ To view or respond to any of the issues listed below, click on the issue. Do NOT respond to this message. Issues counts and deltas: open4838 ( -3) closed 31069 (+44) total 35907 (+41) Open issues wit

Re: [Python-Dev] PYTHONHTTPSVERIFY env var

2015-05-08 Thread Antoine Pitrou
Using an environment variable to disable a security feature sounds like an extremely bad idea. Environment variables are hidden state. Generally you don't know up front which values they will have when running an executable, and people don't think about inspecting them. This opens the door to mist

Re: [Python-Dev] PYTHONHTTPSVERIFY env var

2015-05-08 Thread M.-A. Lemburg
On 08.05.2015 11:36, Nick Coghlan wrote: > On 8 May 2015 6:52 pm, "M.-A. Lemburg" wrote: >> >> On 07.05.2015 04:30, Nick Coghlan wrote: Can we please make the monkeypatch a regular part of Python's site.py which can enabled via an environment variable, say export PYTHONHTTPSVERIFY=0

Re: [Python-Dev] PYTHONHTTPSVERIFY env var (was: Clarification of PEP 476 "opting out" section)

2015-05-08 Thread Nick Coghlan
On 8 May 2015 6:52 pm, "M.-A. Lemburg" wrote: > > On 07.05.2015 04:30, Nick Coghlan wrote: > >> Can we please make the monkeypatch a regular part of Python's > >> site.py which can enabled via an environment variable, say > >> export PYTHONHTTPSVERIFY=0. > >> > >> See http://bugs.python.org/issue2

Re: [Python-Dev] PYTHONHTTPSVERIFY env var (was: Clarification of PEP 476 "opting out" section)

2015-05-08 Thread M.-A. Lemburg
On 07.05.2015 04:30, Nick Coghlan wrote: >> Can we please make the monkeypatch a regular part of Python's >> site.py which can enabled via an environment variable, say >> export PYTHONHTTPSVERIFY=0. >> >> See http://bugs.python.org/issue23857 for the discussion. > ... > I actually do think it would