Martin v. Löwis <mar...@v.loewis.de> added the comment:

Please don't say that "urllib does not perform any ssl validation". It 
certainly *does* perform ssl validation, namely it validates whether the 
payload received over ssl matches the certificate received from the server.

What it does not do is to validate the server certificate in any form (AFAIU).

----------
nosy: +loewis

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue9983>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to