From: Victor Stinner <victor.stinner@gmail.com>
Date: Thu, 13 Mar 2014 13:54:46 +0000 (+0100)
Subject: What's New in Python 3.4: more security changes
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=97c36425322dd646470f187d8742dd644e40d425;p=python

What's New in Python 3.4: more security changes
---

diff --git a/Doc/whatsnew/3.4.rst b/Doc/whatsnew/3.4.rst
index 94b71c5b47..c12c4bf52a 100644
--- a/Doc/whatsnew/3.4.rst
+++ b/Doc/whatsnew/3.4.rst
@@ -143,6 +143,12 @@ Security improvements:
   (:pep:`456`).
 * :ref:`Make newly created file descriptors non-inheritable <whatsnew-pep-446>`
   (:pep:`446`) to avoid leaking file descriptors to child processes.
+* New command line option for :ref:`isolated mode <whatsnew-isolated-mode>`,
+  (:issue:`16499`).
+* All modules of the standard library now support server certificate
+  verification including hostname matching (:func:`ssl.match_hostname`) and CRL
+  (Certificate Revocation list, see
+  :func:`ssl.SSLContext.load_verify_locations`).
 * A new :func:`hashlib.pbkdf2_hmac` function provides
   the `PKCS#5 password-based key derivation function 2
   <http://en.wikipedia.org/wiki/PBKDF2>`_.