Issue #19508: warn that ssl doesn't validate certificates by default

f7a52475 · Antoine Pitrou · be1d3c18 · f7a52475
Commit f7a52475 authored Nov 17, 2013 by Antoine Pitrou
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

Doc/library/ssl.rst Doc/library/ssl.rst +4 -0

No files found.
--- a/Doc/library/ssl.rst
+++ b/Doc/library/ssl.rst
@@ -30,6 +30,10 @@ probably additional platforms, as long as OpenSSL is installed on that platform.
   operating system socket APIs.  The installed version of OpenSSL may also
   cause variations in behavior.

+.. warning::
+   The ssl module won't validate certificates by default.  When used in
+   client mode, this means you are vulnerable to man-in-the-middle attacks.
+
 .. warning::

   OpenSSL's internal random number generator does not properly handle fork.