Verify certificate of https://verifier.login.persona.org/verify about pybrowserid HOT 3 CLOSED

Thanks for checking on this. PyBrowserID uses the requests library, which is supposed to do the verification automatically and transparently. See here, where we pass in verify=True:

https://github.com/mozilla/PyBrowserID/blob/master/browserid/netutils.py#L23

Technically I think this is unnecessary, as "verify" defaults to True per the docs here:

http://www.python-requests.org/en/latest/user/advanced/#ssl-cert-verification

But I put it in explicitly in case anyone fiddles with the defaults and we don't notice.
Can you suggest any ways to do this better or more thoroughly?

from pybrowserid.

https://github.com/kennethreitz/requests/issues/1659 might be relevant to this discussion?

from pybrowserid.

It's not clear to me what more needs to be done here on the PyBrowserID side, if anything. Tentatively closing this but please re-open it with more details if I've missed anything.

from pybrowserid.