python tls_适用于Python的统一TLS API

python tls

I have just proposed PEP 543: A Unified TLS API for Python to the python-dev mailing list for discussion. While the bulk of the technical correspondence will happen on that mailing list, I wanted to briefly write a long-form, less formal discussion of why this PEP is important and the problems I’m trying to address.

我刚刚向python-dev邮件列表提出了PEP 543：针对Python的统一TLS API进行讨论。 尽管大部分技术通信将在该邮件列表中进行，但我还是想简短地写一篇关于该PEP为何重要以及我要解决的问题的非正式形式的长篇讨论。

To understand the problem that this PEP aims to address, it’s important to try to understand the approaches that different programming languages take to supporting TLS. TLS is an extremely widely-deployed network protocol and it’s essential for any language that wants to be used for “real work” to have at least some support for TLS, if only to ensure that data can be securely retrieved from websites. That means that anyone working on a programming language eventually needs to confront a core question: “how will my users do TLS?”

要了解此PEP旨在解决的问题，重要的是尝试了解不同编程语言支持TLS所采用的方法。 TLS是一种极其广泛使用的网络协议，对于所有想要用于“实际工作”的语言，至少要确保可以从网站安全地检索数据，它对于TLS至少具有一定的支持至关重要。 这意味着任何使用编程语言的人最终都需要面对一个核心问题：“我的用户将如何执行TLS？”

Conveniently, languages can be broken more or less down the middle into two groups, which I will for inflammatory reasons call “systems languages” and “higher-level languages”. This is an obviously absurd categorisation of languages, but it’s a simple enough division that lets us focus on intent.

方便地，语言可以或多或少地分为两类，出于煽动性的原因，我将它们称为“系统语言”和“高级语言”。 这显然是一种荒谬的语言分类 ，但这是一个足够简单的划分，使我们可以专注于意图。

For the “systems languages”, which for this example include languages like C, C++, and Rust, there is a focus on simplicity and minimalism: it is necessary to be able to build binaries that assume a minimal operating environment. For these languages, TLS is considered to be a “bring your own” affair: programmers that want TLS should reach for one of the many binary TLS libraries that the world has to offer (such as OpenSSL or GnuTLS), the language will not provide one for them. In these