Issue #19508: warn that ssl doesn't validate certificates by default
diff --git a/Doc/library/ssl.rst b/Doc/library/ssl.rst
index 898e7d2..fe653b4 100644
--- a/Doc/library/ssl.rst
+++ b/Doc/library/ssl.rst
@@ -31,6 +31,10 @@
cause variations in behavior.
.. warning::
+ The ssl module won't validate certificates by default. When used in
+ client mode, this means you are vulnerable to man-in-the-middle attacks.
+
+.. warning::
OpenSSL's internal random number generator does not properly handle fork.
Applications must change the PRNG state of the parent process if they use