[issue10441] some stdlib modules need to be updated to handle SSL certificate validation

[Nicolas Bareil]

Nicolas Bareil <nico at chdir.org> added the comment:

Hello,


Your patch about SSLContext is great! But what can we do about python 2.x?

I understand that we have to keep backward compatibility but something has to be done for improving current situation, even Paypal API (*) recommends using urllib.urlopen() to check sensitive things on HTTPS :(

If backporting SSLContext into python 2.x is not an option, what do you think about a DeprecationWarning at runtime?

Thanks,

(*) https://www.x.com/devzone/articles/getting-started-paypal-django
    And even the popular Django paypal module uses urllib2 
    https://github.com/johnboxall/django-paypal

----------
nosy: +nbareil

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue10441>
_______________________________________