DEV Community

Scott Watermasysk
Scott Watermasysk

Posted on • Originally published at scottw.com on

SSL::VERIFY_NONE - NEVER!

#ruby #ssl #security

I saw this little doozy as recommend code for (Ruby) API access:

http.verify_mode = OpenSSL::SSL::VERIFY_NONE

This effectively disables SSL checks and is not something anyone should be recommending….ever.

Top comments (0)

Read next

hungle00 profile image

Ruby Fiber Scheduler and Async

hungle00 -

lukehinds profile image

Understanding SafeTensors: A Secure Alternative to Pickle for ML Models

Luke Hinds -

jimmymcbride profile image

I Survived a Massive DDoS Attack and Made My Server Bulletproof

Jimmy McBride -

evergreat profile image

Web Development Legal Rules!

Parjad Minooei -