DEV Community

Scott Watermasysk
Scott Watermasysk

Posted on • Originally published at scottw.com on

SSL::VERIFY_NONE - NEVER!

#ruby #ssl #security

I saw this little doozy as recommend code for (Ruby) API access:

http.verify_mode = OpenSSL::SSL::VERIFY_NONE

This effectively disables SSL checks and is not something anyone should be recommending….ever.

Top comments (0)

Read next

lmntixdev_9b7c97bf92b3ef7 profile image

Self hosted supabase setup with Authelia and Caddy

lmntixdev -

geetfun profile image

Using Thruster web server for Ruby apps

Simon Chiu -

mr-3 profile image

How Minecraft Hypixel Scammers Are Getting Away With Your Accounts

Mr 3 -

ayush7614 profile image

How to Configure WireGuard VPN in the Cloud

Ayush kumar -