From exarkun at twistedmatrix.com Mon Jan 9 10:58:24 2017 From: exarkun at twistedmatrix.com (Jean-Paul Calderone) Date: Mon, 9 Jan 2017 12:58:24 -0500 Subject: [Twisted-web] Announcing txAWS 0.2.3.1 Message-ID: I've just release txAWS 0.2.3.1. txAWS is a library for interacting with Amazon Web Services (AWS) using Twisted. AWSServiceEndpoint's ssl_hostname_verification's parameter now defaults to True instead of False. This affects all txAWS APIs which issue requests to AWS endpoints. For any application which uses the default AWSServiceEndpoints, the server's TLS certificate will now be verified. This resolves a security issue in which txAWS applications were vulnerable to man-in-the-middle attacks which could either steal sensitive information or, possibly, alter the AWS operation requested. The new release is available on PyPI in source and wheel forms. You can also find txAWS at its new home on github, . Special thanks to Least Authority Enterprises () for sponsoring the work to find and fix this issue and to publish this new release. Jean-Paul -------------- next part -------------- An HTML attachment was scrubbed... URL: