Then the comment should say "We don't bother to authenticate when using TLS" not "TLS has no authentication".