Knowledge Drop
Last tested: Jan 21, 2019
This checkbox allows you to specify if you want to require verification of the SSL certificate used by the connection. Unverified certificates will still ensure encrypted connections.
Logic behind it:
If the SSL certificate is not verified, a third party can’t eavesdrop on the communication, but we aren’t 100% certain that the server we are talking to is who they say they are. It is pretty common for companies to have servers with “self-signed” certificates inside their own infrastructure. These are usually safe to trust since their IT controls what servers are in their own infrastructure. If we have a ssh tunnel into their infrastructure it should be ok too. SSL is still important because otherwise someone who has access to the network might be able to read the packets as they go by....You should never trust a non-verified connection on the open internet, unless you are just using sample data or something else that is not important.
LinkedIn
Twitter