verify SSL by default