Jonathan Vanasco

suggestion: oauth1 docs - more consistent and document 'interfaces'

1

this is mostly targeted at the oauth1 docs. i haven't gotten into oauth2 yet. there are 2 rather annoying bits: 1. all the args dealing with tokens use `token`. it...

support for partial chain verification in X509StoreContext

1

openssl supports verifying a partial chain on the commandline: openssl verify -partial_chain -trusted intermediate_1.pem intermediate_2.pem This functionality does not seem possible in pyopenssl. I tried using `X509StoreContext` as I use...

## Feature Request When there is a configuration issue, such as no session factory configured, Pyramid raises a standard AttributeError. See: https://github.com/Pylons/pyramid/blob/68a6cb1dba7944f1e214ca62ce700e3f7ddf618d/src/pyramid/request.py#L189-L201 It would be beneficial if Pyramid were to...

sqlalchemy integration & docs incorrect, upstream change coming

4

I'm posting this on the main pyramid tracker, but it concerns code in the pyramid docs and the pyramid cookiecutter. The `naming_convention` in the starter template and pyramid docs which...

Filesize concerns

15

I've noticed that the images created by PIL are quite large. gifs seem to be over 4x larger than they could be. pngs are around 130% larger i tested this...

Rate Limit Focus Pages (Duplicate, Failed) should link back to All Rate Limits page

3

The two rate limit focus pages: * https://letsencrypt.org/docs/duplicate-certificate-limit/ * https://letsencrypt.org/docs/failed-validation-limit/ Should have a link back to https://letsencrypt.org/docs/rate-limits/ I suggest something like the following (markdown): # Learn More About Rate Limits...

Under `Subscriber Information` there should be a "Requirements" page that lists things such as: * TLS v1.2 is required for inbound connections (Client API Requests) and outbound connections (Validation). and...

Feature Request - Machine readable version of /certificates

9

I believe it would be useful to have a machine readable version of the information in `/certificates`. That would allow for client developers and integrators to quickly check if anything...

I believe the ratelimits documentation is outdated in respect to these passages: > If you're actively developing or testing a Let's Encrypt client, please utilize our staging environment instead of...

possible security vulnerability in user input

5

i discovered a specific vulnerability in a handful of python form validation and sanitization libraries yesterday. colander is affected. the behavior is desired in some contexts, but dangerous in most...