I would suggest that this should default to True instead of defaulting to False. The pycurl downloader does this, but also, it's better to default to secure (requiring the user to do something special to get insecure behavior) than to default to insecure. My $0.02.