Yes, we should disable the certificate verification in 14.04 since 14.04 initially shipped with a version of Python 3.4 that did not perform certificate verification by default. We may decide to enable certificate verification by default in a future security update.
I tend to agree with Steve that the complexity of a global toggle for certificate verification is something that deserves some thought. In the out-of-band communication that Barry mentioned, I didn't ack or nack such a global toggle. I think some people will find it useful. However, it is something that can be rolled out separately from this urgent SRU. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1348954 Title: update Python3 for trusty To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/python3-defaults/+bug/1348954/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
