[issue20988] Recommend ssl.create_default_context() in "Security considerations"

2014-03-20 Thread Antoine Pitrou
Antoine Pitrou added the comment: Duplicate of issue 20913. -- resolution: -> duplicate status: open -> closed superseder: -> Standard Library documentation needs SSL security best practices doc. ___ Python tracker

[issue20988] Recommend ssl.create_default_context() in "Security considerations"

2014-03-19 Thread Nick Coghlan
Nick Coghlan added the comment: Potentially more controversial: we could also update that section and other parts of the docs to state that "create_default_context" is expected to become a true default context in a future release. (such that if you want insecure settings, you will have to opt

[issue20988] Recommend ssl.create_default_context() in "Security considerations"

2014-03-19 Thread Nick Coghlan
New submission from Nick Coghlan: The ssl docs currently have a security warning at the top directing users to the Security Considerations section at http://docs.python.org/3/library/ssl#ssl-security That section currently dives directly into the technical details of choosing suitable SSL set