Re: [Full-disclosure] Python ssl handling could be better...

[Tim <tim-security@xxxxxxxxxxxxxxxxxxx>]

> I will, however, humorously point out that not seeing anything in black and
> white is...sort of black and white... :)

Yes, I have come to the conclusion over the years that some things in
security really are black and white, while other things definitely are
very grey.*  Being able to determine the difference is a key skill for
security professionals of any kind.

cheers,
tim


* To put it another way, the function which describes security return on
  investment, as one grows investment from 0 to infinity is sometimes
  continuous and sometimes discontinuous (stair-stepped), or a mix
  thereof, depending on the situation.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/