Raymond Hettinger added the comment:

I think we should consider this as an API design bug and backport the fix.

This seems to be the exact cause of this week's email address leak at 
LetsEncrypt:  

* 
https://community.letsencrypt.org/t/email-address-disclosures-preliminary-report-june-11-2016/16867

* https://news.ycombinator.com/item?id=11881704

* https://twitter.com/TvdW/status/741482093054550016

----------
nosy: +rhettinger
priority: normal -> high
status: closed -> open
versions: +Python 2.7 -Python 3.3

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue10839>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to