Ian Stapleton Cordasco

Yes. Every report of a memory leak we've had has been related to using TLS. We've never been able to track it further than the SSL library

Closing/re-opening since I can't trigger CI to run here

My input is "garbage in, garbage out". The input causing the behavior is garbage so I'm not worried about this

> This is definitely an edge case, but I'm hesitant to call it garbage because the interface allows arbitrary dictionaries as input. If you're constructing your input dynamically and end...

So, what if we made the behaviour of looking at the system CA bundle an extra, e.g., `pip install requests[system_ca]` where it would ship without our certificate bundle and instead...

@alex would something like ``` py import requests from requests import certs requests.get(url, verify=certs.system_bundle_where()) ``` Be a sufficiently good API?

@tmehlinger build-time/install-time dependency is not a actual runtime dependency

My concern with using pkg_resources/entry-points is that someone can very easily create a malicious plugin with a set of roots that will allow them to MITM your connection.

> If your Adapter isn't handling anything with retries and relies solely on urllib3, I wouldn't expect auth to be recomputed. This is 100% correct. You're operating at 2 different...

Without knowing what you're telling urllib3 to retry or what the exact behavior is of your service we can't help you and support requests are best asked on Stack overflow.