diff --git a/pkgs/development/python-modules/selenium/default.nix b/pkgs/development/python-modules/selenium/default.nix
index a1db98deeb7..bafff76be57 100644
--- a/pkgs/development/python-modules/selenium/default.nix
+++ b/pkgs/development/python-modules/selenium/default.nix
@@ -35,8 +35,7 @@ buildPythonPackage rec {
     trio
     trio-websocket
     urllib3
-  ] ++ urllib3.optional-dependencies.secure
-  ++ urllib3.optional-dependencies.socks;
+  ] ++ urllib3.optional-dependencies.socks;
 
   checkInputs = [
     pytestCheckHook
diff --git a/pkgs/development/python-modules/urllib3/default.nix b/pkgs/development/python-modules/urllib3/default.nix
index be16615d148..dbcf05c9c52 100644
--- a/pkgs/development/python-modules/urllib3/default.nix
+++ b/pkgs/development/python-modules/urllib3/default.nix
@@ -2,14 +2,10 @@
 , brotli
 , brotlicffi
 , buildPythonPackage
-, certifi
-, cryptography
 , python-dateutil
 , fetchPypi
 , isPyPy
-, idna
 , mock
-, pyopenssl
 , pysocks
 , pytest-freezegun
 , pytest-timeout
@@ -65,7 +61,9 @@ buildPythonPackage rec {
 
   passthru.optional-dependencies = {
     brotli = if isPyPy then [ brotlicffi ] else [ brotli ];
-    secure = [ certifi cryptography idna pyopenssl ];
+    # we are removing secure dependencies as they are no longer relevant with py3:
+    # https://urllib3.readthedocs.io/en/stable/reference/contrib/pyopenssl.html
+    # secure = [ certifi cryptography idna pyopenssl ];
     socks = [ pysocks ];
   };