[issue23033] Disallow support for a*.example.net, *a.example.net, and a*b.example.net in certificate wildcard handling.

[Christian Heimes]

Christian Heimes added the comment:

Sounds good to me!

For 3.7 I'm planning to use OpenSSL's hostname verification system and deprecate match_hostname(). It does support partial matching by default.

----------
nosy: +christian.heimes
stage:  -> needs patch
type:  -> security
versions: +Python 3.6, Python 3.7

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue23033>
_______________________________________