What's New in Python 3.4: more security changes

diff --git a/Doc/whatsnew/3.4.rst b/Doc/whatsnew/3.4.rst
index 94b71c5b47d60a0b976cbc2b6923913dcd11e7e6..c12c4bf52ab62bfa4eea706d48c887457e25bb88 100644 (file)
--- a/Doc/whatsnew/3.4.rst
+++ b/Doc/whatsnew/3.4.rst
@@ -143,6 +143,12 @@ Security improvements:
   (:pep:`456`).
 * :ref:`Make newly created file descriptors non-inheritable <whatsnew-pep-446>`
   (:pep:`446`) to avoid leaking file descriptors to child processes.
+* New command line option for :ref:`isolated mode <whatsnew-isolated-mode>`,
+  (:issue:`16499`).
+* All modules of the standard library now support server certificate
+  verification including hostname matching (:func:`ssl.match_hostname`) and CRL
+  (Certificate Revocation list, see
+  :func:`ssl.SSLContext.load_verify_locations`).
 * A new :func:`hashlib.pbkdf2_hmac` function provides
   the `PKCS#5 password-based key derivation function 2
   <http://en.wikipedia.org/wiki/PBKDF2>`_.