The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...
LWN.net

Python decides for certificate validation

Python offers library functions for establishing secure HTTPS connections between a client and server, but few users are aware that those routines suffer from what some would deem a fatal flaw. By ...

8 certificate keys leaked. Browsers are protected, but you must fix curl and Python yourself

A "certificate" acts as an identity card for a website. It has been discovered that the private keys for eight intermediate ...
LWN.net

Python, SSL/TLS certificates and default validation

Since the beginning of time—Python time anyway—there has been no checking of SSL/TLS certificates in Python's standard library; neither the urllib nor the urllib2 library performs this checking. As a ...