david <db.pub.m...@gmail.com> added the comment:

So I know the current patch doesn't support IP addresses but I thought I would 
link to what mozilla considered a security problem(just for future reference):

CVE-2010-3170: http://www.mozilla.org/security/announce/2010/mfsa2010-70.html

"Security researcher Richard Moore reported that when an SSL certificate was 
created with a common name containing a wildcard followed by a partial IP 
address a valid SSL connection could be established with a server whose IP 
address matched the wildcard range by browsing directly to the IP address. It 
is extremely unlikely that such a certificate would be issued by a Certificate 
Authority."

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue1589>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to