[Python-Dev] Suggested changes to verify HTTPS by default (was Re: Proposed schedule for 3.4.2)

2014-09-09 Thread Nick Coghlan
On 9 September 2014 03:44, Alex Gaynor wrote: > *Shifts uncomfortably* it looks like presently there's not a good way to > change anything about the SSL configuration for urllib.request.urlopen. It > does not take a `context` argument, as the http.client API does: > https://docs.python.org/3/libra

Re: [Python-Dev] Backwards compatibility after certificate autovalidation

2014-09-09 Thread Christian Heimes
On 09.09.2014 05:03, Nick Coghlan wrote: > > On 9 Sep 2014 10:48, "Jim J. Jewett" > wrote: >> I assume that adding _unverified_urlopen or urlopen(context=...) do >> provide incremental improvements compatible with the eventual full >> opt-in. If so, adding them is pr

Re: [Python-Dev] Suggested changes to verify HTTPS by default (was Re: Proposed schedule for 3.4.2)

2014-09-09 Thread Guido van Rossum
I'm going to leave the design up to Nick and friends for a while. Let me know when there is a patch to review. On Tue, Sep 9, 2014 at 3:52 AM, Nick Coghlan wrote: > On 9 September 2014 03:44, Alex Gaynor wrote: > > *Shifts uncomfortably* it looks like presently there's not a good way to > > cha

Re: [Python-Dev] Backwards compatibility after certificate autovalidation

2014-09-09 Thread Nick Coghlan
On 10 Sep 2014 02:11, "Christian Heimes" wrote: > > On 09.09.2014 05:03, Nick Coghlan wrote: > > > > On 9 Sep 2014 10:48, "Jim J. Jewett" > > wrote: > >> I assume that adding _unverified_urlopen or urlopen(context=...) do > >> provide incremental improvements compatib

Re: [Python-Dev] Backwards compatibility after certificate autovalidation

2014-09-09 Thread Jim J. Jewett
On Tue, Sep 9, 2014 at 12:11 PM, Christian Heimes wrote: > On 09.09.2014 05:03, Nick Coghlan wrote: >> >> On 9 Sep 2014 10:48, "Jim J. Jewett" > > wrote: >> From Guido's and your feedback, I think we may need two things to >> approve this for 3.4.2 (putting 2.7 aside f

Re: [Python-Dev] Backwards compatibility after certificate autovalidation

2014-09-09 Thread Nick Coghlan
On 10 September 2014 07:13, Jim J. Jewett wrote: > On Tue, Sep 9, 2014 at 12:11 PM, Christian Heimes > wrote: >> On 09.09.2014 05:03, Nick Coghlan wrote: >>> >>> On 9 Sep 2014 10:48, "Jim J. Jewett" >> > wrote: >>> From Guido's and your feedback, I think we may need