DEV Community

Scott Watermasysk
Scott Watermasysk

Posted on • Originally published at scottw.com on

SSL::VERIFY_NONE - NEVER!

#ruby #ssl #security

I saw this little doozy as recommend code for (Ruby) API access:

http.verify_mode = OpenSSL::SSL::VERIFY_NONE

This effectively disables SSL checks and is not something anyone should be recommending….ever.

Top comments (0)

Read next

francotel profile image

Cómo Compartir un Secreto: Desglosando el Método de Adi Shamir para la Seguridad de Datos

francotel -

scofieldidehen profile image

Passwords: Are they going extinct?

Scofield Idehen -

programmerraja profile image

The Day a DDOS Attack Led to the Most Awkward Hello World

Boopathi -

aws-cloudsec profile image

Issue 63 of AWS Cloud Security Weekly

AJ -