I think curl can be used in a way it ignores the server certificate (I think is `--insecure` after checking documentation). I'd check it and include in this piece of documentation.