Insecure Default Certificate Verification in Programming Languages
8Many programming languages (Python, Ruby, PHP, Perl) have insecure certificate verification defaults, either not verifying certificates at all or only checking the trust chain without hostname verification. This is fixed slowly due to backward-compatibility concerns.
securityPythonRubyPHP+2