Christian Heimes added the comment:

the default context sets context.options |= getattr(_ssl, "OP_NO_COMPRESSION", 
0), _create_unverified_context() is missing that line.

----------
stage:  -> needs patch
type:  -> security
versions: +Python 3.6, Python 3.7 -Python 3.3, Python 3.4

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue20994>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to