Alex Gaynor added the comment:

I'm opposed to adding FIPS knobs to Python's SSL module for a few reasons:

- FIPS is a bad standard (which I'm happy to talk at length about)
- OpenSSL is regularly on the verge of dropping FIPS support 
(https://www.openssl.org/blog/blog/2016/07/20/fips/ is the most recent rescue 
from the brink of removal)
- It further ties us to the OpenSSL API, in favor of being a more general 
purpose SSL API.

----------
nosy: +alex, christian.heimes, dstufft, giampaolo.rodola, janssen, pitrou

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue27592>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to