Our client has provided self signed certificate for one of the internal service. We are acceessing this service in our shell script using curl. In order to connect to that service we need to provide certiface in our curl command or we can disable ssl verification using -k in our curl command. We wanted to know is it safe to disable ssl verification on production?
Is it recommended to disable ssl verification instead of providing ca certificate in production?
Viewed 823
1 Answers
NO
Disabling certificate verification removes all security properties from the HTTPS connection. It is strongly advised that you do not disable it.
Related