do ssl verification by default to HEC