Python 3.4 added ssl.create_default_context(), ideally urllib3 should use this where possible. It is designed to be a "give me a SSLContext with best practices applied" function and will ideally enable improvements in that particular function to be picked up by urllib3 automatically.