From 97c36425322dd646470f187d8742dd644e40d425 Mon Sep 17 00:00:00 2001
From: Victor Stinner <victor.stinner@gmail.com>
Date: Thu, 13 Mar 2014 14:54:46 +0100
Subject: [PATCH] What's New in Python 3.4: more security changes

---
 Doc/whatsnew/3.4.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Doc/whatsnew/3.4.rst b/Doc/whatsnew/3.4.rst
index 94b71c5b47d..c12c4bf52ab 100644
--- a/Doc/whatsnew/3.4.rst
+++ b/Doc/whatsnew/3.4.rst
@@ -143,6 +143,12 @@ Security improvements:
   (:pep:`456`).
 * :ref:`Make newly created file descriptors non-inheritable <whatsnew-pep-446>`
   (:pep:`446`) to avoid leaking file descriptors to child processes.
+* New command line option for :ref:`isolated mode <whatsnew-isolated-mode>`,
+  (:issue:`16499`).
+* All modules of the standard library now support server certificate
+  verification including hostname matching (:func:`ssl.match_hostname`) and CRL
+  (Certificate Revocation list, see
+  :func:`ssl.SSLContext.load_verify_locations`).
 * A new :func:`hashlib.pbkdf2_hmac` function provides
   the `PKCS#5 password-based key derivation function 2
   <http://en.wikipedia.org/wiki/PBKDF2>`_.