Re: [Python-Dev] Python 3.7: Require OpenSSL>=1.0.2 / LibreSSL>= 2.5.3

2018年1月15日 22:45:27 -0800

Matt Billenstein writes:
 > In my mind it becomes easier to bundle deps in a binary installer
 > across the board (Linux, OSX, Windows) rather than rely on whatever
 > version the operating system provides.
Thing is, as Christian points out, TLS is a rapidly moving target.
Every Mac OS or iOS update seems to link to a dozen CVEs for TLS
support. We can go there if we have to, but it's often hard to go
back when vendor support catches up to something reasonable. I think
this is something for Ned and Christian and Steve to negotiate, since
they're the ones who are most aware of the tradeoffs and bear the
costs.
_______________________________________________
Python-Dev mailing list
[email protected]
https://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Reply via email to