Christian Heimes added the comment:

The patch implements check_hostname in order to match SSL certs with the peer's 
hostname in ftp, imap, nntp, pop and smtp library. So far the patch needs more 
tests and doc updates.

I consider the new feature a security fix. Right now everybody with any valid 
TLS/SSL certificate can claim that its certificate is valid for 
'smtp.google.com'.

----------
keywords: +patch
nosy: +georg.brandl, larry
Added file: http://bugs.python.org/file32831/check_hostname.patch

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue19509>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to