whatsnew: ssl.create_default_context (#19689).

diff --git a/Doc/whatsnew/3.4.rst b/Doc/whatsnew/3.4.rst
index b0ba65900866158aedc4b3736ac8f0a84c41d6f8..d079b3c979daa25a8cd8b5ca33b3dbcaf293c934 100644 (file)
--- a/Doc/whatsnew/3.4.rst
+++ b/Doc/whatsnew/3.4.rst
@@ -1327,6 +1327,13 @@ server, and certificates for a server to use in verifying client certificates
 (``purpose=``:data:`~ssl.Purpose.CLIENT_AUTH`).  (Contributed by Christian
 Heimes in :issue:`19292`.)
 
+New function :func:`~ssl.create_default_context` provides a standard way to
+obtain an :class:`~ssl.SSLContext` based on the settings Python uses by
+default.  These settings are more stringent than the defaults provided by the
+:class:`~ssl.SSLContext` constructor, and may be adjusted (without notice) in
+the future to maintain a balance between compatibility and security.
+(Contributed by Christian Heimes in :issue:`19689`.)
+
 
 stat
 ----