Post #1590308

@joshbressers @ancoghlan @hugovk it gets tricky when it's something that's contextually secure, e.g. `http.server` is secure under my attacker model when I'm running it on localhost, and I like that Python has it. but I'm sure the CPython folks are very tired of getting vuln reports for it!