Yep, I believe the idea is to maximize the chance that we use a library that verifies SSL certificates but fall back on something that at least works.