The video claims that the Python standard library doesn't check certificates by default. In fact, it has done for at least a couple of years ([0] quotes the documentation as saying that it changed two years ago - in 2.7.9 and 3.4.3).

Although the video is marked 2015, the overlay at the start shows it's from PyCon 2013.

[0]: http://stackoverflow.com/a/28325763/2492