[issue9983] please add a large NOTE explaining that urllib does not perform any ssl validation

[Martin v. Löwis]

Martin v. Löwis <martin at v.loewis.de> added the comment:

Please don't say that "urllib does not perform any ssl validation". It certainly *does* perform ssl validation, namely it validates whether the payload received over ssl matches the certificate received from the server.

What it does not do is to validate the server certificate in any form (AFAIU).

----------
nosy: +loewis

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue9983>
_______________________________________