It's embarrassing to see that the CIA's Self-Signed Cert trick advocates "http.sslVerify false".