2017-06-23 15:19 GMT+02:00 Larry Hastings :
> Do you need write access to the branch in order to get Travis CI working?
As soon as someone reviews my proposed 3.4 patches, no :-) I will work on a PR.
Victor
___
Python-Dev mailing list
Python-Dev@python.
On 06/23/2017 01:55 AM, Victor Stinner wrote:
Larry: would you be ok to turn this protection off on the 3.4 branch?
Or would you feel more confortable if only a few people would be
allowed to push to the 3.4 branch, so add me a whitelist group or
something like that?
Actually I kind of like the
2017-06-22 17:56 GMT+02:00 Brett Cannon :
> On Thu, 22 Jun 2017 at 02:32 Larry Hastings wrote:
>> Seriously, though, I was mostly hoping other people would handle the
>> security stuff and just keep me informed. If I'm the only one permitted to
>> accept PRs into 3.4 (and soon 3.5), okay, I can w
On Thu, 22 Jun 2017 at 02:32 Larry Hastings wrote:
>
>
> On 06/22/2017 01:04 AM, Victor Stinner wrote:
>
> About the cipher list in ssl, the change itself is simple but it's to
> blacklist DES and 3DES since it has been proved that these ciphers are
> really too weak nowadays:
>
> http://python-s
On 06/22/2017 01:04 AM, Victor Stinner wrote:
About the cipher list in ssl, the change itself is simple but it's to
blacklist DES and 3DES since it has been proved that these ciphers are
really too weak nowadays:
http://python-security.readthedocs.io/vuln/cve-2016-2183_sweet32_attack_des_3des
For 3.4, please review my pending security fixes :-) There are more of them.
About the cipher list in ssl, the change itself is simple but it's to
blacklist DES and 3DES since it has been proved that these ciphers are
really too weak nowadays:
http://python-security.readthedocs.io/vuln/cve-2016-21
2017-06-22 5:58 GMT+03:00 Larry Hastings :
> There have only been two (2) checkins into the 3.4 branch since 3.4.6 was
> released back in January:
>
> f37b0cb230069481609b0bb06891b5dd26320504
> bpo-25008: Deprecate smtpd and point to aiosmtpd
>
> fa53dbdec818b0f2a0e22ca12a49d83ec948fc91
> I
