I also wonder (and could easily be convinced either way) if it would be simpler for verifiers to return `True`/`False`, then leave it up to the caller to raise an `SSLError`.

The problem with going that route is that it doesn't afford any opportunity to return an error message… which is pretty annoying, but could be hacked around with a `VerifyResult` object which always tests to false-ish… Hrm…