)]}'
{"docs/ssl_tls.md":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"31ee7d1ebb34563333d3cc0663e994e6d8ca033a","unresolved":false,"context_lines":[{"line_number":9,"context_line":"* Avoid the use of TLS versions 1.0, 1.1"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"### Correct"},{"line_number":12,"context_line":"Good version of TLS are defined thusly in Pythons built in ssl module:"},{"line_number":13,"context_line":"- \u0027PROTOCOL_SSLv23\u0027 only in conjunction with \u0027OP_NO_SSLv2\u0027 and \u0027OP_NO_SSLv3\u0027"},{"line_number":14,"context_line":"- \u0027PROTOCOL_TLSv1_2\u0027"},{"line_number":15,"context_line":""}],"source_content_type":"text/x-markdown","patch_set":2,"id":"5afe65bd_08e2de03","line":12,"updated":"2015-06-02 14:17:11.000000000","message":"Python\u0027s  --  thusly doesn\u0027t sound right to me","commit_id":"9ab7e65b123a828e36f56e35f38555d956048f64"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"31ee7d1ebb34563333d3cc0663e994e6d8ca033a","unresolved":false,"context_lines":[{"line_number":13,"context_line":"- \u0027PROTOCOL_SSLv23\u0027 only in conjunction with \u0027OP_NO_SSLv2\u0027 and \u0027OP_NO_SSLv3\u0027"},{"line_number":14,"context_line":"- \u0027PROTOCOL_TLSv1_2\u0027"},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Good version of TLS are defined thusly in the pyOpenSSL package:"},{"line_number":17,"context_line":"- \u0027SSLv23_METHOD\u0027 only in conjunction with \u0027OP_NO_SSLv2\u0027 and \u0027OP_NO_SSLv3\u0027"},{"line_number":18,"context_line":"- \u0027TLSv1_2_METHOD\u0027"},{"line_number":19,"context_line":""}],"source_content_type":"text/x-markdown","patch_set":2,"id":"5afe65bd_48bfb6d0","line":16,"updated":"2015-06-02 14:17:11.000000000","message":"Good *versions - not a huge fan of \"thusly\"","commit_id":"9ab7e65b123a828e36f56e35f38555d956048f64"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"31ee7d1ebb34563333d3cc0663e994e6d8ca033a","unresolved":false,"context_lines":[{"line_number":18,"context_line":"- \u0027TLSv1_2_METHOD\u0027"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"### Incorrect"},{"line_number":21,"context_line":"Bad versions of SSL/TLS are defined thusly in Pythons built in ssl module:"},{"line_number":22,"context_line":"- \u0027PROTOCOL_SSLv2\u0027"},{"line_number":23,"context_line":"- \u0027PROTOCOL_SSLv3\u0027"},{"line_number":24,"context_line":"- \u0027PROTOCOL_TLSv1\u0027"}],"source_content_type":"text/x-markdown","patch_set":2,"id":"5afe65bd_28991a6f","line":21,"updated":"2015-06-02 14:17:11.000000000","message":"thusly :\\","commit_id":"9ab7e65b123a828e36f56e35f38555d956048f64"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"31ee7d1ebb34563333d3cc0663e994e6d8ca033a","unresolved":false,"context_lines":[{"line_number":24,"context_line":"- \u0027PROTOCOL_TLSv1\u0027"},{"line_number":25,"context_line":"- \u0027PROTOCOL_TLSv1_1\u0027"},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"Bad versions of SSL/TLS are defined thusly in the pyOpenSSL package"},{"line_number":28,"context_line":"- \u0027SSLv2_METHOD\u0027"},{"line_number":29,"context_line":"- \u0027SSLv3_METHOD\u0027"},{"line_number":30,"context_line":"- \u0027TLSv1_METHOD\u0027"}],"source_content_type":"text/x-markdown","patch_set":2,"id":"5afe65bd_089e5e56","line":27,"updated":"2015-06-02 14:17:11.000000000","message":"thusly :\u0027(","commit_id":"9ab7e65b123a828e36f56e35f38555d956048f64"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"171ef0fb8fbcc67961a781c6cdb9610e43d19b85","unresolved":false,"context_lines":[{"line_number":36,"context_line":""},{"line_number":37,"context_line":"* Unintended data leakage or theft"},{"line_number":38,"context_line":"* System identity impersonation (certificate theft)"},{"line_number":39,"context_line":"* System identity theft (certificate theft)"},{"line_number":40,"context_line":"* Burden caused by mass revocation of compromised certificates"},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"## References"}],"source_content_type":"text/x-markdown","patch_set":2,"id":"5afe65bd_52c1a9e3","line":39,"updated":"2015-06-02 13:49:34.000000000","message":"What\u0027s teh difference between these two?","commit_id":"9ab7e65b123a828e36f56e35f38555d956048f64"},{"author":{"_account_id":11716,"name":"Tim Kelsey","email":"timothy.kelsey@uk.ibm.com","username":"tkelsey"},"change_message_id":"6b622664fbb7be716d30df1b4c1e9e5f39a83b6c","unresolved":false,"context_lines":[{"line_number":36,"context_line":""},{"line_number":37,"context_line":"* Unintended data leakage or theft"},{"line_number":38,"context_line":"* System identity impersonation (certificate theft)"},{"line_number":39,"context_line":"* System identity theft (certificate theft)"},{"line_number":40,"context_line":"* Burden caused by mass revocation of compromised certificates"},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"## References"}],"source_content_type":"text/x-markdown","patch_set":2,"id":"5afe65bd_d5da2378","line":39,"in_reply_to":"5afe65bd_52c1a9e3","updated":"2015-06-02 13:55:00.000000000","message":"nothing really, I just assumed a reader may not fully understand what \"theft\" of a systems identity might allow. Though perhaps \"owning\" a systems identity may have value to an attacker other than directly impersonating it. I can remove it if you like","commit_id":"9ab7e65b123a828e36f56e35f38555d956048f64"},{"author":{"_account_id":12000,"name":"Ian Cordasco","email":"sigmavirus24@gmail.com","username":"sigmavirus24"},"change_message_id":"f195209285c2a26d4623e5adbaf4773a263ca117","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"5afe65bd_26494b8c","updated":"2015-06-02 14:54:55.000000000","message":"Since the doc is about SSL/TLS should we also discuss cipher suites and compression?","commit_id":"db8f6077ea8e2c88c2281a7ccdb5bb70e71541e8"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"d059e360d5499ef967cb86d22fec0270a9e18970","unresolved":false,"context_lines":[{"line_number":9,"context_line":"* Avoid the use of TLS versions 1.0, 1.1"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"### Correct"},{"line_number":12,"context_line":"Good version of TLS are defined thusly in Python\u0027s built in ssl module:"},{"line_number":13,"context_line":"- \u0027PROTOCOL_SSLv23\u0027 only in conjunction with \u0027OP_NO_SSLv2\u0027 and \u0027OP_NO_SSLv3\u0027"},{"line_number":14,"context_line":"- \u0027PROTOCOL_TLSv1_2\u0027"},{"line_number":15,"context_line":""}],"source_content_type":"text/x-markdown","patch_set":4,"id":"5afe65bd_463b27ec","line":12,"updated":"2015-06-02 14:55:48.000000000","message":"one more thusly slipped through :)","commit_id":"db8f6077ea8e2c88c2281a7ccdb5bb70e71541e8"},{"author":{"_account_id":11716,"name":"Tim Kelsey","email":"timothy.kelsey@uk.ibm.com","username":"tkelsey"},"change_message_id":"3f0d94d0f39ff53f8df4c1cdcc04b24d8abd5d8d","unresolved":false,"context_lines":[{"line_number":9,"context_line":"* Avoid the use of TLS versions 1.0, 1.1"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"### Correct"},{"line_number":12,"context_line":"Good version of TLS are defined thusly in Python\u0027s built in ssl module:"},{"line_number":13,"context_line":"- \u0027PROTOCOL_SSLv23\u0027 only in conjunction with \u0027OP_NO_SSLv2\u0027 and \u0027OP_NO_SSLv3\u0027"},{"line_number":14,"context_line":"- \u0027PROTOCOL_TLSv1_2\u0027"},{"line_number":15,"context_line":""}],"source_content_type":"text/x-markdown","patch_set":4,"id":"5afe65bd_6194cd36","line":12,"in_reply_to":"5afe65bd_463b27ec","updated":"2015-06-02 15:07:21.000000000","message":"can\u0027t even keep one :P fair enough","commit_id":"db8f6077ea8e2c88c2281a7ccdb5bb70e71541e8"},{"author":{"_account_id":12000,"name":"Ian Cordasco","email":"sigmavirus24@gmail.com","username":"sigmavirus24"},"change_message_id":"f195209285c2a26d4623e5adbaf4773a263ca117","unresolved":false,"context_lines":[{"line_number":11,"context_line":"### Correct"},{"line_number":12,"context_line":"Good version of TLS are defined thusly in Python\u0027s built in ssl module:"},{"line_number":13,"context_line":"- \u0027PROTOCOL_SSLv23\u0027 only in conjunction with \u0027OP_NO_SSLv2\u0027 and \u0027OP_NO_SSLv3\u0027"},{"line_number":14,"context_line":"- \u0027PROTOCOL_TLSv1_2\u0027"},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Good version of TLS are defined in the pyOpenSSL package as:"},{"line_number":17,"context_line":"- \u0027SSLv23_METHOD\u0027 only in conjunction with \u0027OP_NO_SSLv2\u0027 and \u0027OP_NO_SSLv3\u0027"}],"source_content_type":"text/x-markdown","patch_set":4,"id":"5afe65bd_e67453d0","line":14,"updated":"2015-06-02 14:54:55.000000000","message":"Should we note that this is only available on *some* versions of Python? (Namely, if I remember correctly, 2.7.9, 2.7.10, and 3.x)","commit_id":"db8f6077ea8e2c88c2281a7ccdb5bb70e71541e8"},{"author":{"_account_id":11716,"name":"Tim Kelsey","email":"timothy.kelsey@uk.ibm.com","username":"tkelsey"},"change_message_id":"3f0d94d0f39ff53f8df4c1cdcc04b24d8abd5d8d","unresolved":false,"context_lines":[{"line_number":11,"context_line":"### Correct"},{"line_number":12,"context_line":"Good version of TLS are defined thusly in Python\u0027s built in ssl module:"},{"line_number":13,"context_line":"- \u0027PROTOCOL_SSLv23\u0027 only in conjunction with \u0027OP_NO_SSLv2\u0027 and \u0027OP_NO_SSLv3\u0027"},{"line_number":14,"context_line":"- \u0027PROTOCOL_TLSv1_2\u0027"},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Good version of TLS are defined in the pyOpenSSL package as:"},{"line_number":17,"context_line":"- \u0027SSLv23_METHOD\u0027 only in conjunction with \u0027OP_NO_SSLv2\u0027 and \u0027OP_NO_SSLv3\u0027"}],"source_content_type":"text/x-markdown","patch_set":4,"id":"5afe65bd_618ded30","line":14,"in_reply_to":"5afe65bd_e67453d0","updated":"2015-06-02 15:07:21.000000000","message":"yes, good point Ian","commit_id":"db8f6077ea8e2c88c2281a7ccdb5bb70e71541e8"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"d059e360d5499ef967cb86d22fec0270a9e18970","unresolved":false,"context_lines":[{"line_number":24,"context_line":"- \u0027PROTOCOL_TLSv1\u0027"},{"line_number":25,"context_line":"- \u0027PROTOCOL_TLSv1_1\u0027"},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"Bad versions of SSL/TLS are defined in the pyOpenSSL package as"},{"line_number":28,"context_line":"- \u0027SSLv2_METHOD\u0027"},{"line_number":29,"context_line":"- \u0027SSLv3_METHOD\u0027"},{"line_number":30,"context_line":"- \u0027TLSv1_METHOD\u0027"}],"source_content_type":"text/x-markdown","patch_set":4,"id":"5afe65bd_06264fce","line":27,"updated":"2015-06-02 14:55:48.000000000","message":"as:","commit_id":"db8f6077ea8e2c88c2281a7ccdb5bb70e71541e8"}]}