saper added a comment.
This is with all SSL connections with my Python (2.7.9 from FreeBSD ports), so it is not in that sense Wikimedia-specific.
I think I'd rather have one CA certificate blob per site (or group of sites) instead of blindly trusting some random CA collection off the Internet. I am sure that at least for Wikimedia wikis the CA certificate will be properly maintained.
TASK DETAIL https://phabricator.wikimedia.org/T98104
REPLY HANDLER ACTIONS Reply to comment or attach files, or !close, !claim, !unsubscribe or !assign <username>.
EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/
To: saper Cc: jayvdb, saper, Aklapper, pywikipedia-bugs