Re: [Python-Dev] Python 3.7: Require OpenSSL >=1.0.2 / LibreSSL >= 2.5.3

2018-01-15 Thread Stephen J. Turnbull
Matt Billenstein writes: > In my mind it becomes easier to bundle deps in a binary installer > across the board (Linux, OSX, Windows) rather than rely on whatever > version the operating system provides. Thing is, as Christian points out, TLS is a rapidly moving target. Every Mac OS or iOS upd

Re: [Python-Dev] Python 3.7: Require OpenSSL >=1.0.2 / LibreSSL >=2.5.3

2018-01-15 Thread Steve Dower
>From my perspective, we can’t keep an OpenSSL-like API and use Windows >platform libraries (we could do a requests-like API easily enough, but even >urllib3 is painfully low-level). We have to continue shipping our own copy of OpenSSL on Windows. Nothing to negotiate here except whether OpenSS