From: sblondon <stephane.blondon@gmail.com>
Date: Mon, 2 Jan 2023 16:59:57 +0000 (+0100)
Subject: Remove obsolete comment (#873)
X-Git-Tag: v2.4.0rc1~72
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6ba30da01c3c9ae704090ef0691f03054ed2013d;p=thirdparty%2Fdnspython.git

Remove obsolete comment (#873)
---

diff --git a/dns/query.py b/dns/query.py
index 11e5fc8c..b4cd69f7 100644
--- a/dns/query.py
+++ b/dns/query.py
@@ -1032,13 +1032,7 @@ def tls(
         where, port, source, source_port
     )
     if ssl_context is None and not sock:
-        # LGTM complains about this because the default might permit TLS < 1.2
-        # for compatibility, but the python documentation says that explicit
-        # versioning is deprecated, and that as of python 3.6 it will negotiate
-        # the highest version possible.  We also set a minimum version when we
-        # can, even though this might require a future dnspython release if that
-        # version becomes deprecated.
-        ssl_context = ssl.create_default_context()  # lgtm[py/insecure-protocol]
+        ssl_context = ssl.create_default_context()
         ssl_context.minimum_version = ssl.TLSVersion.TLSv1_2
         if server_hostname is None:
             ssl_context.check_hostname = False