Comment 5 for bug 1188189

Revision history for this message
Chuck Thier (cthier) wrote : Re: Potentially insecure use of httplib.HTTPSConnection

So for Swift:

swift.common.bufferedhttp has the capability to instantiate an https connection, but is not used directly in any of the swift code (this is likely due to the original swift client using it before it was pulled out). Internal services (for example from proxy -> object) communicate over plain http on a private network. So unless there is something else that I missed, I don't see a security vulnerability in swift.