Skip to content
Search Create account

DEV Community

DEV Community is a community of 616,766 amazing developers

We're a place where coders share, stay up-to-date and grow their careers.

Create new account Log in
loading...

SSL::VERIFY_NONE - NEVER!

#ruby #ssl #security
scottw profile image Scott Watermasysk Originally published at scottw.com on ・1 min read

I saw this little doozy as recommend code for (Ruby) API access:

http.verify_mode = OpenSSL::SSL::VERIFY_NONE

This effectively disables SSL checks and is not something anyone should be recommending….ever.

Discussion (0)

pic
Editor guide

Read next

chekkan profile image

Ruby on Rails GitHub Action Workflow

Harish Babu -

bryanjazo profile image

Rails Spotify Project

Bryanjazo -

lordghostx profile image

Implementing Two-factor Authentication with Flask, PyOTP, and Fauna

LordGhostX -

yarotheslav profile image

TLDR - Basic search field with Ruby on Rails

Yaroslav Shmarov -