diff --git a/pep-0466.txt b/pep-0466.txt index bbf355087..0ab19b230 100644 --- a/pep-0466.txt +++ b/pep-0466.txt @@ -86,9 +86,12 @@ Backwards Compatibility Considerations As in the Python 3 series, the backported ``ssl.create_default_context()`` API is granted a backwards compatibility exemption that permits the protocol, options, cipher and other settings of the created SSL context to -be made +be updated in maintenance releases to use higher default security settings. +This allows them to appropriately balance compatibility and security at the +time of the maintenance release, rather than at the time of the original +feature release. -This PEP does *not* grant any exemptions to the usual backwards +This PEP does *not* grant any other exemptions to the usual backwards compatibility policy for maintenance releases. Instead, by explicitly encouraging the use of feature based checks, it is designed to make it easier to write more secure cross-version compatible Python software, while still