vmware/pyvmomi

Implement TOFU (Trust On First Use) for pyVmomi

Open

#160 opened on Sep 9, 2014

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Python (2,141 stars) (807 forks)batch import
help wantedwishlist

Description

See: urllib3 and TOFU

TODO:

  • What level of support does Python have for TOFU?
  • How can we make this behave appropriately for a user at the CLI versus a daemon?

Contributor guide

Tech stack
python
Domain
security
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
needs investigation
Prerequisites
Basic PythonSSL/TLS conceptspyVmomi usage
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
25
Research direction
Investigate Python's built in ssl module for supporting TOFU, as used in urllib3. Determine if the host key pinning approach can be adapted for the pyVmomi library's HTTP connections. Also consider whether the feature should be configurable per session or globally for CLI vs daemon use cases.