On 10/19/2013 12:46 PM, Ian Cordasco wrote:
Also the three of us maintaining requests and the author of urllib3
are all very conscious that the packaged pem file is outdated. We have
an open issue about how to rebuild it accurately while taking into
consideration (and not including) the ones that have been revoked. Any
suggestions you have can be sent to me off list or reported on the
issue tracker.
Is this another issue like the time zone database? Something that needs
to be packaged with some versions of Python, but that needs a mechanism
to update it later for accuracy (which, in this case, also implies
security)?
Could a similar mechanism be used for both?
_______________________________________________
Python-Dev mailing list
Python-Dev@python.org
https://mail.python.org/mailman/listinfo/python-dev
Unsubscribe:
https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com
