both sender and receiver request remote SSL certificate, but only if it's a new one.
Correctly verify remote SSL certificate.