Allowing invalid SSL certificates is a serious security vulnerability. There must be a flag that allows developers to enable this insecure mode in dev environment and revert back to the default secure mode in production.