[Zope-Coders] FastCGI leaking Authorization header

[Guido van Rossum]

> IMO, It would be nice to be able to release 2.3.x, 2.4.x, and 2.5.x, 
> containing only critical changes such as this.

Yes!

> Historically Zope's third point releases have included a sufficiently broad 
> range of bug fixes that it has been unwise to upgrade without testing them 
> first.

Python used to do this; the last time we did that was 1.5.2, which was
a massive functionality upgrade to 1.5.1.  We've learned that this is
not right, and now we strive for forward *and* backward compatibility
between two-dot releases (e.g. 2.2 and 2.2.1).  Link-time (== C API)
compatibility and bytecode (== .pyc file) compatibility are a must;
library modules must never break an old API and have a damned good
reason to introduce a new one (like, "the only way to fix this bug is
to add a new API").

Highly recommended.

--Guido van Rossum (home page: http://www.python.org/~guido/)