Martin Panter <vadmium...@gmail.com> added the comment: Issue 32185 proposes to stop sending IP addresses in the TLS SNI protocol. Maybe this will help; it depends if it will catch IP address strings with with whitespace or if there are other ways to inject invalid hostnames.
---------- dependencies: +SSLContext.wrap_socket sends SNI Extension when server_hostname is IP _______________________________________ Python tracker <rep...@bugs.python.org> <https://bugs.python.org/issue32085> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com