Skip to content
Search Create account

DEV Community

DEV Community is a community of 862,249 amazing developers

We're a place where coders share, stay up-to-date and grow their careers.

Create account Log in
Twitter Facebook Github Instagram Twitch
Scott Watermasysk
Scott Watermasysk

Posted on • Originally published at scottw.com on

SSL::VERIFY_NONE - NEVER!

#ruby #ssl #security

I saw this little doozy as recommend code for (Ruby) API access:

http.verify_mode = OpenSSL::SSL::VERIFY_NONE

This effectively disables SSL checks and is not something anyone should be recommending….ever.

Discussion (0)

Read next

notapatch profile image

Rubymine running Rails with Foreman

not-a-patch -

dbackeus profile image

Cut your Rails boot times on Heroku in half with a single command

David Backeus -

anuvindhs profile image

Securing your Load Balancer with CloudFront

Anuvindh Sankaravilasam -

yulin profile image

OverTheWire Bandit Levels 19-34 Hints and Notes

Yulin Chen -