Validating certificates is a good thing and everybody should do it. That said .....

st3fan on July 30, 2012 | parent | context | favorite | on: Do you check HTTPS certificates in your API client...

Validating certificates is a good thing and everybody should do it.

That said ... it really only tells you that a certificate is 'sound'. It by no means tells you with 100% confidence that you are talking to the right party.

SSL/TLS is still pretty fragile.