DendroPy
DendroPy copied to clipboard
Re-enable secure SSL in setup.py
Hi, I noticed that DendroPy disables SSL certificate verification globally in setup.py:
import ssl
if hasattr(ssl, '_create_unverified_context'):
ssl._create_default_https_context = ssl._create_unverified_context
It seems this workaround should no longer be necessary. Can it be removed to avoid any doubts about security at install time?
No longer necessary universally, or no longer necessary for particular/latest versions of Python, OS, etc.?
Disabling SSL security is not necessary in any supported configuration of Python or its host OS that I'm aware of.