Closed Eswcvlad closed 10 months ago
The ssl.wrap_socket function was deprecated in 3.7 and now it is fully removed in 3.12.
The logic, that the code does not validate the server certificate in any way, has been preserved for compatibility reasons, but this is pretty insecure and, ideally, should be a configurable option.
Thank for the implementation. The compatibility is a currently a good thing even if unsecure.
The ssl.wrap_socket function was deprecated in 3.7 and now it is fully removed in 3.12.
The logic, that the code does not validate the server certificate in any way, has been preserved for compatibility reasons, but this is pretty insecure and, ideally, should be a configurable option.