Because of course it does
post
Have they done their own in house testing against the certs? If they come up clean...
5 comments in c/security@lemmy.ml view that post
on the one hand:

on the other hand:
everyone should run this command and gape in horror at how many versions of certifi they have in containers, virtualenvs, and/or vendored etc:
locate certifi/__init__.py|xargs cat|grep ^__version__|sort|uniq -c
😱
(and then locate certifi/__init__.py|xargs grep ^__version__ to see where they all are)
replies:
all 2 comments