diff --git a/python/ql/src/Security/CWE-327/README.md b/python/ql/src/Security/CWE-327/README.md index 9e7b11581d0..b26b5bc3faf 100644 --- a/python/ql/src/Security/CWE-327/README.md +++ b/python/ql/src/Security/CWE-327/README.md @@ -8,7 +8,7 @@ This should be kept up to date; the world is moving fast and protocols are being - TLS 1.0 and TLS 1.1 are insecure - TLS 1.2 have some issues. but TLS 1.3 is not widely supported -## Conection methods +## Connection methods - `ssl.wrap_socket` is creating insecure connections, use `SSLContext.wrap_socket` instead. [link](https://docs.python.org/3/library/ssl.html#ssl.wrap_socket) > Deprecated since version 3.7: Since Python 3.2 and 2.7.9, it is recommended to use the `SSLContext.wrap_socket()` instead of `wrap_socket()`. The top-level function is limited and creates an insecure client socket without server name indication or hostname matching.