Python 3.7’s SSLSocket Improvements

First, if you haven’t heard of SSLSocket before, it’s essentially the way Python handles secure communication over networks. It uses Secure Sockets Layer (SSL) or Transport Layer Security (TLS) to encrypt data being transmitted between two parties. And in version 3.7, there have been some pretty sweet updates!

One of the biggest improvements is that SSLSocket now supports OpenSSL 1.1.0 which means you can finally say goodbye to those ***** security vulnerabilities and hello to a more secure connection. The minimum recommended version for this update is 1.0.2, but if you’re feeling adventurous (and have the necessary hardware), you can go all out with OpenSSL 1.1.1.

SSLSocket now has TLSVersion constants and SSLContext.maximum_version / minimum_version attributes which means you can finally customize your connection to fit your specific needs (and not just rely on the default settings). This is a huge improvement for those of us who need to work with legacy systems or have specific security requirements.

And if that wasn’t enough, SSLSocket now has one less layer of indirection which means faster and more efficient communication between parties. Owner and session information are also handled by the SSLSocket constructor, making it easier for you to manage your connections without all the extra hassle.

But let’s not forget about channel binding implementation simplification! This update makes it easier for you to verify that data is coming from a trusted source which means less headaches and more peace of mind when working with sensitive information.

7 are here, and they’re better than ever before. Whether you need faster communication or stronger security, this update has got you covered. So go ahead and start implementing these changes today your code (and your clients) will thank you for it!

SICORPS