why not verify ssl?