{"action":"created","issue":{"url":"https://api.github.com/repos/urllib3/urllib3/issues/497","repository_url":"https://api.github.com/repos/urllib3/urllib3","labels_url":"https://api.github.com/repos/urllib3/urllib3/issues/497/labels{/name}","comments_url":"https://api.github.com/repos/urllib3/urllib3/issues/497/comments","events_url":"https://api.github.com/repos/urllib3/urllib3/issues/497/events","html_url":"https://github.com/urllib3/urllib3/issues/497","id":47400165,"node_id":"MDU6SXNzdWU0NzQwMDE2NQ==","number":497,"title":"Feature: Remove support for common names in certificates","user":{"login":"sigmavirus24","id":240830,"node_id":"MDQ6VXNlcjI0MDgzMA==","avatar_url":"https://avatars3.githubusercontent.com/u/240830?v=4","gravatar_id":"","url":"https://api.github.com/users/sigmavirus24","html_url":"https://github.com/sigmavirus24","followers_url":"https://api.github.com/users/sigmavirus24/followers","following_url":"https://api.github.com/users/sigmavirus24/following{/other_user}","gists_url":"https://api.github.com/users/sigmavirus24/gists{/gist_id}","starred_url":"https://api.github.com/users/sigmavirus24/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sigmavirus24/subscriptions","organizations_url":"https://api.github.com/users/sigmavirus24/orgs","repos_url":"https://api.github.com/users/sigmavirus24/repos","events_url":"https://api.github.com/users/sigmavirus24/events{/privacy}","received_events_url":"https://api.github.com/users/sigmavirus24/received_events","type":"User","site_admin":false},"labels":[{"id":799830518,"node_id":"MDU6TGFiZWw3OTk4MzA1MTg=","url":"https://api.github.com/repos/urllib3/urllib3/labels/Proposed%20Solution%20Accepted","name":"Proposed Solution Accepted","color":"c2e0c6","default":false}],"state":"open","locked":false,"assignee":{"login":"haikuginger","id":7773758,"node_id":"MDQ6VXNlcjc3NzM3NTg=","avatar_url":"https://avatars3.githubusercontent.com/u/7773758?v=4","gravatar_id":"","url":"https://api.github.com/users/haikuginger","html_url":"https://github.com/haikuginger","followers_url":"https://api.github.com/users/haikuginger/followers","following_url":"https://api.github.com/users/haikuginger/following{/other_user}","gists_url":"https://api.github.com/users/haikuginger/gists{/gist_id}","starred_url":"https://api.github.com/users/haikuginger/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/haikuginger/subscriptions","organizations_url":"https://api.github.com/users/haikuginger/orgs","repos_url":"https://api.github.com/users/haikuginger/repos","events_url":"https://api.github.com/users/haikuginger/events{/privacy}","received_events_url":"https://api.github.com/users/haikuginger/received_events","type":"User","site_admin":false},"assignees":[{"login":"haikuginger","id":7773758,"node_id":"MDQ6VXNlcjc3NzM3NTg=","avatar_url":"https://avatars3.githubusercontent.com/u/7773758?v=4","gravatar_id":"","url":"https://api.github.com/users/haikuginger","html_url":"https://github.com/haikuginger","followers_url":"https://api.github.com/users/haikuginger/followers","following_url":"https://api.github.com/users/haikuginger/following{/other_user}","gists_url":"https://api.github.com/users/haikuginger/gists{/gist_id}","starred_url":"https://api.github.com/users/haikuginger/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/haikuginger/subscriptions","organizations_url":"https://api.github.com/users/haikuginger/orgs","repos_url":"https://api.github.com/users/haikuginger/repos","events_url":"https://api.github.com/users/haikuginger/events{/privacy}","received_events_url":"https://api.github.com/users/haikuginger/received_events","type":"User","site_admin":false}],"milestone":null,"comments":93,"created_at":"2014-10-31T14:32:39Z","updated_at":"2019-10-29T19:59:27Z","closed_at":null,"author_association":"MEMBER","body":"We should follow the [lead of Chromium](https://code.google.com/p/chromium/issues/detail?id=308330). We should deprecate support for use of common names when a certificate doesn't provide a subjectAltName.\n\nThis will bring us into compliance with the >10 year old RFC 2818\n## \n"},"comment":{"url":"https://api.github.com/repos/urllib3/urllib3/issues/comments/547603200","html_url":"https://github.com/urllib3/urllib3/issues/497#issuecomment-547603200","issue_url":"https://api.github.com/repos/urllib3/urllib3/issues/497","id":547603200,"node_id":"MDEyOklzc3VlQ29tbWVudDU0NzYwMzIwMA==","user":{"login":"sigmavirus24","id":240830,"node_id":"MDQ6VXNlcjI0MDgzMA==","avatar_url":"https://avatars3.githubusercontent.com/u/240830?v=4","gravatar_id":"","url":"https://api.github.com/users/sigmavirus24","html_url":"https://github.com/sigmavirus24","followers_url":"https://api.github.com/users/sigmavirus24/followers","following_url":"https://api.github.com/users/sigmavirus24/following{/other_user}","gists_url":"https://api.github.com/users/sigmavirus24/gists{/gist_id}","starred_url":"https://api.github.com/users/sigmavirus24/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sigmavirus24/subscriptions","organizations_url":"https://api.github.com/users/sigmavirus24/orgs","repos_url":"https://api.github.com/users/sigmavirus24/repos","events_url":"https://api.github.com/users/sigmavirus24/events{/privacy}","received_events_url":"https://api.github.com/users/sigmavirus24/received_events","type":"User","site_admin":false},"created_at":"2019-10-29T19:59:27Z","updated_at":"2019-10-29T19:59:27Z","author_association":"MEMBER","body":"> But since urllib3 no longer accepts breaking changes, the support itself won't be removed, I think.\r\n\r\n@pquentin I suspect that you don't mean to imply that urllib3 won't change cipher suites or default accepted TLS versions as the the most uncharitable description of them would be \"breaking changes\".\r\n\r\nAs the world moves forward towards better security practices, so should this project. If it doesn't under the guise of \"no breaking changes\", it will become irrelevant.\r\n\r\nProvided an escape hatch (unlike a browser), this seems like a reasonable breaking change given that we've been warning about it for 5 years."}}
{"actor":{"display_login":"sigmavirus24"}}