note xmlrpclib doesn't verify certs (yet)

e1ca1a82 · Benjamin Peterson · 1d0efec6 · e1ca1a82
Commit e1ca1a82 authored Oct 13, 2014 by Benjamin Peterson
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

Doc/library/xmlrpclib.rst Doc/library/xmlrpclib.rst +5 -0

No files found.
--- a/Doc/library/xmlrpclib.rst
+++ b/Doc/library/xmlrpclib.rst
@@ -34,6 +34,11 @@ between conformable Python objects and XML on the wire.
   constructed data.  If you need to parse untrusted or unauthenticated data see
   :ref:`xml-vulnerabilities`.
+.. warning::
+   In the case of https URIS, :mod:`xmlrpclib` does not do any verification of
+   the server's certificate.
 .. class:: ServerProxy(uri[, transport[, encoding[, verbose[,  allow_none[, use_datetime]]]]])