On 2010年11月13日 07:30:05 -0500 James Y Knight <foom at fuhm.net> wrote: > On Nov 13, 2010, at 7:08 AM, Antoine Pitrou wrote: > > Funny, it shows that the NNTP SSL tests don't check the certificate, > > then. >> Unsurprising, given that you need 140 lines of pretty non-obvious python code to do so... You must have missed the new match_hostname() function: http://docs.python.org/dev/library/ssl.html#ssl.match_hostname (its implementation is 50 lines rather than 140 lines, though) Regards Antoine.