Python and SSL

[Paul Rubin]

"Martin v. Löwis" <martin at v.loewis.de> writes:
> It means that these modules can do encrypted communication for their
> respective protocol. They cannot validate that they are really talking
> to the server they think they talk to (so they are prone to a
> man-in-the-middle attack), however, as communication is encrypted, they
> are protected against wire-tapping.

Unless the wiretapper is running a man-in-the-middle attack...