whatsnew: ssl.create_default_context (#19689).

Doc/whatsnew/3.4.rst

@@ -1327,6 +1327,13 @@ server, and certificates for a server to use in verifying client certificates
 (``purpose=``:data:`~ssl.Purpose.CLIENT_AUTH`).  (Contributed by Christian
 Heimes in :issue:`19292`.)
 
+New function :func:`~ssl.create_default_context` provides a standard way to
+obtain an :class:`~ssl.SSLContext` based on the settings Python uses by
+default.  These settings are more stringent than the defaults provided by the
+:class:`~ssl.SSLContext` constructor, and may be adjusted (without notice) in
+the future to maintain a balance between compatibility and security.
+(Contributed by Christian Heimes in :issue:`19689`.)
+
 
 stat
 ----